Sleep

ReviewAudited by ClawScan on May 10, 2026.

Overview

This skill is review-worthy because it automatically records sensitive sleep and health-related details from broad sources into persistent memory without clear opt-in, limits, or deletion controls.

Only install this if you are comfortable with the agent remembering sleep-related information from conversations and possible device data. Before using it, decide what sources are allowed, where the memory file should live, how to review or delete entries, and whether the agent must ask before saving each observation.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Concern

ASI06: Memory and Context Poisoning

What this means

Private sleep, health, routine, and lifestyle details mentioned casually in conversation or obtained from connected devices could be saved and reused later without the user realizing exactly what was recorded.

Why it was flagged

This directs the agent to collect sensitive sleep-related information from broad sources and store it persistently, without clear per-source consent, retention limits, deletion controls, or scoping.

Skill content

- Absorb sleep mentions from ANY source (wearables, conversations, spontaneous comments)
...
User-specific sleep data persists in: `~/sleep/memory.md`
...
*Empty sections = no data yet. Observe conversations and fill.*

Recommendation

Require explicit opt-in before recording sleep data, limit approved sources, store data in a skill-scoped location, document retention and deletion controls, and avoid saving incidental observations unless the user confirms.