v1.0.0

first-aid-kit

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 8:12 AM.

Analysis

This instruction-only first-aid learning skill is coherent and has no code or credential access, but users should notice the optional daily-tip scheduler and its safety-notice exception.

GuidanceThis skill appears safe to install as an educational first-aid helper. Do not use it for active emergencies; call emergency services instead. If you enable daily tips, remember that this creates an ongoing scheduled message and that daily tips may omit the usual safety notice.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Rogue Agents

SeverityLowConfidenceHighStatusNote

SKILL.md

When the user asks to enable daily tips, call `cron.add` to create a recurring isolated job ... "schedule": { "kind": "cron", "expr": "0 9 * * *" } ... "delivery": { "mode": "announce" }

This creates a persistent scheduled agent action. It is disclosed, user-triggered, isolated, and limited to one daily educational tip, so it is a notice item rather than a concern.

User impactIf enabled, the agent may post a first-aid tip every day until the user disables it.

RecommendationOnly enable daily tips if you want recurring messages, confirm the schedule, and use the documented disable request if you no longer want them.

Human-Agent Trust Exploitation

SeverityLowConfidenceHighStatusNote

SKILL.md

Safety Notice (always prepend to every response) ... No safety notice needed.

The skill globally says every response should include an emergency safety notice, but the daily-tip payload explicitly omits it. In a first-aid context, inconsistent safety framing is worth noticing even though the daily tips are educational.

User impactA scheduled tip may arrive without the emergency disclaimer, which could make the educational content feel more like direct advice.

RecommendationTreat all output as learning material only, not emergency guidance; the skill author should make the daily-tip exception explicit or include a brief safety reminder.