Personal Plans

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: personal-plans Version: 1.0.0 The skill is a personal planning assistant that reads and writes to a dedicated local file (`/data/.openclaw/workspace/knowledge/personal/plans.md`) for its memory, as described in `SKILL.md` and `README.md`. All instructions for the AI agent in `SKILL.md` are directly aligned with its stated purpose, involving only confined file operations and standard conversational logic. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts designed to subvert the agent for harmful purposes.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Your task list, deadlines, and reminders may persist locally and be used in later planning conversations.

Why it was flagged

The skill is designed to read and update a persistent personal planning file before responding. This is purpose-aligned, but it means personal task data can be reused across interactions.

Skill content
Перед ответом... Прочитай `/data/.openclaw/workspace/knowledge/personal/plans.md` ... Если пользователь добавил/выполнил задачу или план — обнови ...
Recommendation

Keep the plans file limited to planning information, review it periodically, and avoid storing sensitive secrets or private account details in it.

What this means

If a user downloads a ZIP from the wrong or untrusted location, they could install files not represented in this review.

Why it was flagged

The README documents a manual ZIP download source rather than a verified install specification. No reviewed code or automatic install step is present here, so this is a provenance note rather than evidence of malicious behavior.

Skill content
Download ZIP from [ClawhHub](https://clawdhub.com)
Recommendation

Install only from a trusted registry or verified URL, and inspect any downloaded archive before extracting it into the OpenClaw skills directory.