Projects

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent instruction-only project-planning skill, with the main thing to notice being that it creates and maintains local project files that may include sensitive project or client details.

This skill appears safe for normal use as a local project organizer. Before installing, be aware that it may create and update files under `~/projects/`; review any archive or delete actions, and be careful about storing sensitive client, billing, or personal information in plain local project files.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may make local file-system changes in the project workspace, including creating, moving, or deleting project materials if the user directs that workflow.

Why it was flagged

The skill asks the agent to create and manage local project folders and files, including possible archiving or deletion during reviews.

Skill content
Create `~/projects/` as workspace ... Create folder with README containing answers ... Review someday quarterly — activate, archive, or delete
Recommendation

Keep the workspace scoped to `~/projects/` and confirm before archiving or deleting project folders or files.

What this means

Project folders could contain sensitive contact, billing, decision, or work information that may be exposed if the folder is shared, synced, or backed up insecurely.

Why it was flagged

The skill may store persistent project and client/business information in local files.

Skill content
Client/Work Projects - Add: deadline, contact info, rate if applicable - Track time if billing: simple log in project folder
Recommendation

Avoid storing secrets in these files, and use appropriate local permissions or encrypted storage if project/client details are sensitive.