Prompt Library Gardener

PassAudited by ClawScan on May 12, 2026.

Overview

The visible artifacts describe a no-code prompt organizer that only works on prompts the user provides and does not request file, network, credential, or system access.

This appears safe to use as a prompt-only organizer. Before installing or invoking it, review the full skill text if available, and only paste or upload prompt collections that do not contain secrets or content you would not want processed in the chat.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Prompts pasted into the chat may be summarized and reused in the generated index, so private instructions, secrets, or unsafe prompt variants could be exposed within the conversation output if the user includes them.

Why it was flagged

The skill intentionally processes and summarizes user-provided prompt text in the conversation. This is purpose-aligned and bounded, but prompt libraries can contain sensitive or instruction-like content.

Skill content
Keep sensitive prompt content private within the current conversation. ... Keep a running index only from batches already provided.
Recommendation

Paste only prompt content you are comfortable sharing in the chat, redact secrets, and treat saved prompt text as data to organize rather than instructions for the agent to follow.