founder-coach

ReviewAudited by ClawScan on May 10, 2026.

Overview

The skill is mostly coherent as a startup coaching tool, but it asks to read private PhoenixClaw journal/profile data and describes automatic weekly cron reporting without clear opt-in or setup controls.

Before installing, confirm whether PhoenixClaw integration is enabled, exactly which journal/profile files it may read, whether any weekly cron job will be created, and how to disable scheduled reports or delete stored coaching profiles.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Private journal entries and personal growth notes could be pulled into coaching context even if the user did not explicitly select those files for this session.

Why it was flagged

The skill can use the mere presence of a PhoenixClaw config file to access private journal and memory data, without a clearly stated per-use approval step.

Skill content
Check for `~/.phoenixclaw/config.yaml` ... If exists: Read journal_path, access daily journals and memory
Recommendation

Make PhoenixClaw integration default-off or require explicit consent before reading it; document exact files, date ranges, exclusions, and retention behavior.

ConcernMedium Confidence
ASI10: Rogue Agents
What this means

A scheduled report could repeatedly read journals/session context and write reports without the user actively invoking the coach each time.

Why it was flagged

This describes scheduled background activity, but the skill is otherwise presented as instruction-only and does not document user approval, installation, disabling, or containment for the cron behavior.

Skill content
Timing & Triggers
- **Automatic:** Every Sunday at 10 PM (via cron).
Recommendation

Remove automatic cron behavior or make it an explicit, user-installed opt-in feature with clear disable/uninstall instructions and scoped file access.

What this means

Sensitive business and mindset observations may remain in local profile files over time.

Why it was flagged

The skill intentionally keeps persistent coaching observations about the founder’s thinking patterns and business progress.

Skill content
Location: `~/PhoenixClaw/Startup/founder-profile.md` ... Anti-Patterns Observed (with timestamps) ... **Update Rule**: Append-only.
Recommendation

Review the generated profile periodically and ensure the user can edit, archive, or delete stored observations.

What this means

A user may believe PhoenixClaw data is only read, while some configurations may write AI-generated coaching insights into journals.

Why it was flagged

The artifact presents the integration as read-only but also describes a possible journal-write configuration, which could confuse user expectations.

Skill content
**Data Flow**: One-way (Founder Coach reads PhoenixClaw, does not write to it) ... **Journal Output**: Weekly reports can be configured to add a "Coaching Insights" section to PhoenixClaw daily journals.
Recommendation

Clarify whether PhoenixClaw writes are ever performed, and require explicit confirmation before modifying any journal files.