Coding
PassAudited by ClawScan on May 1, 2026.
Overview
This instruction-only skill is mainly a local coding-preference memory, but users should notice its persistent storage and a small documentation inconsistency about where preferences are updated.
This looks safe for its stated purpose as a local coding-style memory. Before installing, be aware that it will keep preferences in ~/coding/ and reuse them later; confirm only preferences you want remembered, periodically review the memory file, and verify the registry package identity because the embedded metadata does not fully match the registry listing.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Your coding preferences may be remembered and reused in future coding tasks.
The skill intentionally persists coding preferences across sessions and reuses them in later responses.
On Session Start 1. Load `~/coding/memory.md` if exists 2. Apply stored preferences to responses
Only confirm preferences you actually want stored, and use the documented “Show my coding preferences” or “Forget X” flows to review or remove entries.
An agent could interpret the reference file as allowing broader or less-confirmed preference updates than the main instructions intend.
This auxiliary file conflicts with SKILL.md’s clearer rule that preferences go in ~/coding/memory.md only after explicit confirmation, creating minor ambiguity in memory-update handling.
Reference only — consult when deciding whether to update SKILL.md. ... User corrects your choice → add their preference
Treat SKILL.md as authoritative: do not update SKILL.md, and only store a preference after the user explicitly confirms it should be remembered.
You may have less certainty that the listed registry package and the included files refer to the exact same release.
The registry identity/version information does not match the embedded metadata, which is a provenance and packaging consistency issue even though no executable code is present.
Registry: Owner ID kn73vhzz24t2bp0j5tr6scqfn5830nk2, Slug taizi-coding, Version 1.0.4; embedded files show ownerId kn73vp5rarc3b14rc7wjcw8f8580t5d1, slug coding, version 1.0.3
Verify the publisher, slug, and version in ClawHub before installing or relying on updates.