Personal Plans

PendingStatic analysis audit pending.

Overview

No static analysis result has been recorded yet. Pattern checks will appear here once the artifact has been analyzed.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Your task list, deadlines, and reminders may persist locally and be used in later planning conversations.

Why it was flagged

The skill is designed to read and update a persistent personal planning file before responding. This is purpose-aligned, but it means personal task data can be reused across interactions.

Skill content
Перед ответом... Прочитай `/data/.openclaw/workspace/knowledge/personal/plans.md` ... Если пользователь добавил/выполнил задачу или план — обнови ...
Recommendation

Keep the plans file limited to planning information, review it periodically, and avoid storing sensitive secrets or private account details in it.

What this means

If a user downloads a ZIP from the wrong or untrusted location, they could install files not represented in this review.

Why it was flagged

The README documents a manual ZIP download source rather than a verified install specification. No reviewed code or automatic install step is present here, so this is a provenance note rather than evidence of malicious behavior.

Skill content
Download ZIP from [ClawhHub](https://clawdhub.com)
Recommendation

Install only from a trusted registry or verified URL, and inspect any downloaded archive before extracting it into the OpenClaw skills directory.