Personal Knowledge Base

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may write notes to a local folder, fetch information about links you provide, and remove items from the inbox after processing.

Why it was flagged

The skill instructs the agent to create local files, fetch URL metadata, and remove processed inbox entries. These actions are clearly tied to the knowledge-base purpose, but they are still local mutations and network/tool actions users should notice.

Skill content
Create `~/kb/` as the workspace ... Link → fetch title and summary ... Delete from inbox once processed
Recommendation

Use this skill with content you are comfortable storing in ~/kb/, and review processed notes before allowing inbox items to be deleted.

What this means

Private thoughts, quotes, links, or questions you send may be saved and searched later as part of the knowledge base.

Why it was flagged

The skill is designed to persist user-provided content and reuse it for later search and retrieval. This is purpose-aligned, but sensitive or incorrect notes could be retained and later surfaced.

Skill content
User sends anything ... Capture first, organize second ... Offer to search when user asks a question — might already have the answer
Recommendation

Avoid saving secrets or highly sensitive material unless you are comfortable with it being stored in local Markdown files, and periodically review or delete outdated notes.