Context Cleanup

PassAudited by ClawScan on May 10, 2026.

Overview

The skill appears to be a local, user-confirmed memory archiver, but users should review selected memory files and be cautious with noninteractive and JSON modes.

This skill looks consistent with its cleanup purpose and does not show exfiltration or hidden network behavior. Before installing, understand that it can move memory notes into an archive; run analyze and plan first, review the candidate list, avoid --yes unless you are sure, and treat --json mode as optional because it depends on node.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI06: Memory and Context Poisoning

What this means

Archiving memory notes can change what future sessions remember or retrieve.

Why it was flagged

The skill enumerates Markdown files under the workspace memory directory, so it handles persistent agent memory that may influence future context.

Skill content

collect_files() {
  find "$MEMORY_DIR" -type f -name '*.md' -not -path '*/archive/*' | sort
}

Recommendation

Run analyze and plan first, inspect the listed candidates, and use --dry-run if unsure.

NoteHigh Confidence

ASI02: Tool Misuse and Exploitation

What this means

If --yes is used too quickly, memory files may be archived without a final manual prompt.

Why it was flagged

The script can move selected memory files into an archive directory, and the documented --yes option skips the confirmation prompt.

Skill content

if [[ "$AUTO_YES" -ne 1 ]]; then
    read -r -p "确认归档上述文件? (y/N) " confirm
...
    mv "$file" "$ARCHIVE_DIR/"

Recommendation

Use --yes only after reviewing the plan output, and avoid it for important or unfamiliar workspaces.

NoteMedium Confidence

ASI05: Unexpected Code Execution

What this means

JSON mode may fail or behave unexpectedly in unusual workspace paths; normal non-JSON cleanup does not require this path.

Why it was flagged

Optional JSON output is produced by constructing JavaScript code with shell-interpolated values. This is purpose-aligned but brittle, especially for unusual paths containing quotes, and node is not declared as a dependency.

Skill content

node -e "console.log(JSON.stringify({mode:'analyze',workspace:'$WORKSPACE',memory:{files:$file_count,lines:$total_lines,archived:$archive_count}

Recommendation

Prefer the normal analyze/plan output unless JSON is needed; maintainers should use safer JSON escaping and declare node if JSON mode remains supported.