Setup
PassAudited by ClawScan on May 1, 2026.
Overview
This is a coherent project setup helper that reads existing project files and creates or updates local workflow documentation.
This skill appears safe for its stated purpose. Before installing or using it, understand that it will read project documentation/manifests and write local setup files; review the generated changes and only enable optional MCP integrations you trust.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may create or change project files, so the generated workflow and CLAUDE.md edits should be reviewed like any other local codebase change.
The skill is allowed to run a shell command and edit files. The documented operations are local and purpose-aligned, but they still modify the user's project.
allowed-tools: Read, Grep, Bash, Glob, Write, Edit ... Step 6: "mkdir -p docs" ... Step 7: "Generate `docs/workflow.md`" ... Step 8: "Update `CLAUDE.md`"
Run it only from the intended project root and review the resulting diff, especially before confirming regeneration of an existing docs/workflow.md.
Project names, stack details, or code-graph queries could be shared with the configured MCP service if those tools are available.
The skill may query configured solograph MCP tools for project details, knowledge-base content, and code-graph information. This is disclosed and optional, but the data boundary depends on the user's MCP configuration.
MCP Tools (use if available) ... `project_info(name)`, `kb_search(query)`, `codegraph_query(query)` ... "If MCP tools are not available, fall back to reading local files only."
Use it with trusted MCP servers, or disable those MCP tools if you want the setup to rely only on local files.