Context Preserver

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only skill appears aligned with saving and restoring work context, but users should notice that it can persist, restore, delete, import, or export context snapshots.

This skill looks coherent for preserving context. Before installing or using it, decide whether automatic snapshots are appropriate for your work, verify any external context-preserver command comes from a trusted source, and be careful with restore, delete, clean, import, and export operations.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI06: Memory and Context Poisoning

What this means

Your work context may be saved and later reused, exported, or imported, so sensitive details could remain in snapshots.

Why it was flagged

The skill is designed to persist working context and move snapshots in or out; that is purpose-aligned, but persisted or imported context may contain sensitive information or affect future work.

Skill content

- create automatic snapshots at useful moments
- export or import snapshots

Recommendation

Before enabling automatic snapshots or exporting/importing snapshots, confirm where snapshots are stored and clean up snapshots that should not be retained.

Note

ASI02: Tool Misuse and Exploitation

What this means

Restoring, deleting, or cleaning snapshots could overwrite current progress or remove recovery points.

Why it was flagged

These commands can change the current context or remove saved snapshots; they are disclosed and aligned with the skill purpose, but should be user-confirmed when they affect recoverability.

Skill content

context-preserver restore <snapshot-id>
context-preserver delete <snapshot-id>
context-preserver clean

Recommendation

Use restore, delete, and clean only after confirming the target snapshot and whether the current context has been saved.

Note

ASI04: Agentic Supply Chain Vulnerabilities

What this means

If a separate command named context-preserver is used, its behavior depends on whatever external program is installed on the system.

Why it was flagged

The skill documents commands for a context-preserver CLI, while the supplied package is instruction-only with no included code or install specification, so the provenance of any separately installed CLI should be checked.

Skill content

context-preserver snapshot "snapshot-name" --tags tag1,tag2

Recommendation

Only run a context-preserver CLI from a trusted source and verify it is the intended tool before using snapshot operations.