Security audit
Security checks across malware telemetry and agentic risk
This speech-preparation skill is coherent and disclosed, with limited local preference memory that users should be aware of.
Installers should be comfortable with the skill keeping local speech preferences in ~/Clawic/data/speak/, including pronunciation fixes, locale, voice, rate, and context notes. Review or delete those files if you do not want long-term personalization, especially for name pronunciations or language preferences.
- Language switch request → one signal = locale/language update (`multilingual.md`).
- Everything else (rate, style, check-ins, verbosity, notification muting) → two-signal rule (SKILL.md rule 7): comply the first time, confirm and store on the second.
- Situational requests ("just this once, faster", "serious tone for this document") → comply, store nothing.
- Declared settings (voice, rate baseline, time format, locale) → `config.yaml`; observed patterns, lexicon, and engine test results → `preferences.md`. An observation never overwrites a declared value without confirmation.
If the user has said nothing, store nothing.64/64 vendors flagged this skill as clean.
No suspicious patterns detected.