Engineer

PassAudited by VirusTotal on May 11, 2026.

Overview

Type: OpenClaw Skill Name: engineer Version: 1.0.0 The 'Engineer' skill bundle provides a structured framework for engineering reasoning, focusing on constraints, failure modes, and trade-offs. It utilizes a local directory (~/engineer/) for optional persistence of user preferences and decision records, but includes explicit instructions to seek user consent before creating files and states that no network requests are made. No evidence of malicious intent, data exfiltration, or unauthorized command execution was found across the markdown instructions or metadata.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If enabled, the skill may remember engineering preferences and recurring assumptions across sessions.

Why it was flagged

The skill supports persistent local memory that can influence future sessions, but the artifact makes it opt-in and limits the intended contents to preferences and reusable engineering context.

Skill content
Create `~/engineer/memory.md` with this structure only if the user wants persistence
Recommendation

Only enable persistence if you want this behavior; periodically review or delete ~/engineer/ if the stored preferences become stale or too revealing.

What this means

The memory feature is designed for low-sensitivity preferences rather than confidential project data.

Why it was flagged

The artifact directly addresses sensitive-data handling for memory and instructs the agent to avoid storing high-risk content.

Skill content
Do not store credentials, proprietary files, or regulated data.
Recommendation

Avoid putting confidential project details, credentials, regulated data, or proprietary files into this skill's memory.