Events

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent local event-tracking skill, with the main consideration being that it stores personal event details in a local ~/events folder.

This skill appears safe and purpose-aligned for local event tracking. Before installing, be aware that it creates persistent files under ~/events and may store personal schedules, ticket details, birthdays, and RSVP lists, so keep that folder private and protected.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI06: Memory and Context Poisoning

What this means

Anyone or anything with access to the local ~/events folder could see personal plans, confirmation numbers, and social details.

Why it was flagged

The skill explicitly stores persistent local event records that may include personal schedules, ticket confirmations, birthdays, guest names, and RSVP details.

Skill content

Create `~/events/` as workspace ... What To Track - Date, time, location - Tickets/confirmation numbers ... RSVPs when hosting

Recommendation

Use the skill only for information you are comfortable storing locally, and avoid saving highly sensitive confirmation numbers unless your device and backups are appropriately protected.