TRIZ Systematic Innovation Method

PassAudited by ClawScan on May 10, 2026.

Overview

This appears to be a benign local TRIZ brainstorming/reporting skill, with the main cautions being its optional local installer and overconfident-looking “validated” report language.

This skill looks safe to use as a TRIZ brainstorming/report generator. Before installing, understand that running its installer can create a local `triz` executable, and treat generated reports as draft analysis rather than verified engineering conclusions.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI04: Agentic Supply Chain Vulnerabilities

What this means

If the installer is run, it can add or replace a local `triz` command in the user's home-based npm global bin path.

Why it was flagged

The package includes an installer that copies the skill's JavaScript file into the OpenClaw skills directory, makes it executable, and creates a local command symlink. This is scoped and purpose-aligned, but it is noteworthy because the registry says there is no install spec.

Skill content

cp "$SKILL_DIR/triz.js" "$INSTALL_DIR/triz.js"
chmod +x "$INSTALL_DIR/triz.js"
ln -sf "$INSTALL_DIR/triz.js" "$HOME/.npm-global/bin/triz"

Recommendation

Install through trusted ClawHub mechanisms when possible, and review/remove `~/.openclaw/skills/triz.js` and `~/.npm-global/bin/triz` if you do not want the local CLI.

NoteMedium Confidence

ASI09: Human-Agent Trust Exploitation

What this means

Reports may look more authoritative than the visible implementation supports, which could lead users to over-rely on generic recommendations.

Why it was flagged

The included report artifact labels placeholder solution content as technically validated. This does not show malicious behavior, but it means users should be cautious about trusting the skill's 'validated' language as real engineering validation.

Skill content

"title": "Innovation Solution 1",
"description": "Detailed description of solution 1",
...
"technicalValidation": "Validated"

Recommendation

Use the skill as a structured brainstorming aid and independently verify any technical, safety, cost, or implementation claims before acting on them.