Self Improving Cognition

Security checks across malware telemetry and agentic risk

Overview

This is a coherent self-improvement skill, with the main consideration being that it stores personal cognition and decision notes locally and includes a small shell helper plus a declared suite dependency.

This skill appears safe for its stated purpose, but treat the generated cognition logs as personal data. Install it only if you are comfortable keeping those records in your workspace, and review the bundled helper script and declared self-improving-agent dependency if you plan to use the broader suite.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI06: Memory and Context Poisoning
Low
What this means

Your private reflections about thinking patterns, stress, habits, and decisions may be saved for later use by the agent.

Why it was flagged

The skill tells the agent to maintain persistent local cognition records that may include sensitive self-assessment, lifestyle, and stress information.

Skill content
Append to `.learnings/cognition/BASELINE.md` ... Environmental & Lifestyle Factors ... Sleep ... Nutrition ... Exercise ... Stress
Recommendation

Use it only in a workspace where you are comfortable storing personal self-assessment notes, and periodically review or delete the .learnings/cognition files if they are no longer needed.

#
ASI05: Unexpected Code Execution
Low
What this means

Running the helper script will execute local shell commands and create an exercise log file in the current directory.

Why it was flagged

The package includes an interactive shell script that, if run, prompts the user and writes a local Markdown exercise record. The script is simple and purpose-aligned, with no network or destructive behavior shown.

Skill content
#!/bin/bash ... read -p "请选择(1-4): " exercise_type ... cat > "cognitive-exercise-$timestamp.md"
Recommendation

Run the script only intentionally and from a directory where you want the generated exercise record to be saved.

#
ASI04: Agentic Supply Chain Vulnerabilities
Info
What this means

Installing or using this skill may involve related suite behavior depending on how the platform handles declared dependencies.

Why it was flagged

The skill declares a dependency on another self-improvement skill while the registry summary lists no install spec. This appears suite-related, but users should notice the dependency relationship.

Skill content
"dependencies": ["self-improving-agent"], "partOfSuite": "self-improving-suite"
Recommendation

Review the referenced self-improving-agent dependency before relying on the full suite.