Skillv1.0.0

ClawScan security

Personal Sleep Coach · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignFeb 18, 2026, 9:04 AM

Verdict: Benign
Confidence: high
Model: gpt-5-mini
Summary: The skill's requests and instructions are coherent with being a personal sleep coach: it only reads and updates a single personal knowledge file and uses chat history, with no external installs or credentials required.
Guidance: This skill will store personal sleep entries and observations in knowledge/personal/sleep.md. If you install it, confirm you are comfortable with your agent keeping that sleep data locally and ensure the agent's environment secures that file. If you prefer not to persist sleep logs, ask for a read-only conversational coach instead. Also be aware the agent can invoke skills autonomously by default—if you want manual control, adjust skill invocation settings.

Purpose & Capability: okName/description (personal sleep coach) matches the requested actions: reading and updating a personal sleep log, tracking patterns, and giving advice. No unrelated credentials, binaries, or installs are requested.
Instruction Scope: noteRuntime instructions tell the agent to read and update knowledge/personal/sleep.md and to consider chat history; this is consistent with a memory-backed coach. Note: it explicitly writes user sleep data to that file—this is expected but important to be aware of.
Install Mechanism: okNo install spec and no code files are present (instruction-only), so nothing is downloaded or written beyond the specified knowledge file.
Credentials: okThe skill requests no environment variables, credentials, or config paths beyond the single knowledge file. The level of access is proportional to the described functionality.
Persistence & Privilege: okalways is false and the skill does not request system-level changes or cross-skill configuration. It persists only to its declared memory file (knowledge/personal/sleep.md).