Coding
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: coding Version: 1.0.3 The skill is designed to store user coding preferences locally within a dedicated `~/coding/` directory. The `SKILL.md` explicitly states strong security and privacy boundaries, including 'This skill NEVER: Makes network requests, Reads files outside `~/coding/`, Modifies its own SKILL.md'. All file operations are confined to its own data directory (`mkdir -p ~/coding`, reading/writing `memory.md` and `history.md`). There is no evidence of data exfiltration, malicious execution, persistence, or prompt injection with harmful intent. The instructions are clear, restrictive, and align with a benign, local data storage purpose.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Saved preferences may affect future code suggestions until changed or removed.
The skill creates persistent local memory that is reused in later coding responses. This is expected for a preference-memory skill, but persistent context can shape future outputs.
On Session Start 1. Load `~/coding/memory.md` if exists 2. Apply stored preferences to responses
Review `~/coding/memory.md` periodically and remove entries you no longer want the agent to apply.
A user or agent may notice inconsistent wording about where preferences should be updated.
This supporting file uses wording that conflicts with the main SKILL.md direction to store preferences in `~/coding/memory.md` and not modify the skill file itself. The primary instructions are clearer, so this is a documentation note rather than a material concern.
Reference only — consult when deciding whether to update SKILL.md.
Treat `~/coding/memory.md` as the intended memory file and avoid modifying the skill’s own SKILL.md for user preferences.