Back to skill
Skillv1.0.0
ClawScan security
Self Improving Life · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 12, 2026, 10:04 PM
- Verdict
- Benign
- Confidence
- medium
- Model
- gpt-5-mini
- Summary
- The skill's files and runtime instructions match its stated purpose of personal life-assessment and journaling; nothing requests credentials or external network access, but there are minor packaging inconsistencies you should be aware of before running it.
- Guidance
- This skill appears to do what it says: provide templates and a simple interactive shell assessment and save reports locally. Before installing or running: 1) Review the included scripts (scripts/quick-life-assessment.sh) to confirm you are comfortable with the files it creates (life-assessment-*.md) and the paths it appends to (.learnings/life/*). 2) Note the script expects a Unix shell and utilities like bash, bc, and date — ensure your environment has them or run in a compatible shell. 3) Because the package metadata lists a dependency but no install step, verify whether you need an external 'self-improving-agent' component for full functionality. 4) Run the script in an isolated or test directory first if you want to avoid polluting your primary workspace. 5) If you plan to let an autonomous agent invoke the skill, remember it will be able to create files in the agent's working directory — restrict workspace permissions or review activity logs if that matters.
Review Dimensions
- Purpose & Capability
- okName/description (life improvement, balance tracking) aligns with provided SKILL.md, templates, and a simple shell assessment script. The only mismatch is metadata declaring a dependency ('self-improving-agent') while there is no install spec — likely packaging metadata rather than a real extra capability.
- Instruction Scope
- noteInstructions direct the agent/user to append logs to .learnings/life/* and the included script writes a life-assessment-<timestamp>.md file in the current working directory. These file I/O actions are consistent with journaling/tracking but mean the skill will create/modify files in your workspace. The SKILL.md and script do not read or transmit other system files or network endpoints.
- Install Mechanism
- okNo install specification (instruction-only plus an included script) — low-risk from installer behavior. Nothing is downloaded or extracted from remote URLs.
- Credentials
- noteThe skill declares no environment variables or credentials, which matches its purpose. Small inconsistency: the included bash script uses utilities (bash, bc, date) but the registry metadata lists 'no required binaries' — this is a packaging omission rather than credential overreach.
- Persistence & Privilege
- okalways is false and the skill does not request elevated privileges or system-wide configuration changes. It only writes files to the local workspace and has normal user-level persistence.