Code

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Approved coding steps may modify files or run verification in the user’s project.

Why it was flagged

The skill is intended to guide implementation work that may change project files, but the artifact frames this as step-by-step and user-approved.

Skill content
When user approves a step:
1. Execute that step
2. Verify it works
3. Report completion to user
4. Wait for user to approve next step
Recommendation

Use normal safeguards such as version control, reviewing diffs, and approving each step before changes are made.

What this means

Saved preferences may affect future coding sessions and could cause unwanted behavior if incorrect or overly broad preferences are stored.

Why it was flagged

The skill uses a persistent local memory file that can influence future coding behavior, though the artifacts scope it to explicit user-provided preferences.

Skill content
Read `~/code/memory.md` for user's stated preferences if it exists... Only store what user explicitly asks to save.
Recommendation

Only save non-sensitive preferences intentionally, and review or delete ~/code/memory.md if preferences become outdated or incorrect.