Sleep

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ConcernHigh Confidence

ASI06: Memory and Context Poisoning

What this means

Private sleep, health, routine, and lifestyle details mentioned casually in conversation or obtained from connected devices could be saved and reused later without the user realizing exactly what was recorded.

Why it was flagged

This directs the agent to collect sensitive sleep-related information from broad sources and store it persistently, without clear per-source consent, retention limits, deletion controls, or scoping.

Skill content

- Absorb sleep mentions from ANY source (wearables, conversations, spontaneous comments)
...
User-specific sleep data persists in: `~/sleep/memory.md`
...
*Empty sections = no data yet. Observe conversations and fill.*

Recommendation

Require explicit opt-in before recording sleep data, limit approved sources, store data in a skill-scoped location, document retention and deletion controls, and avoid saving incidental observations unless the user confirms.