Vibe Clawing
PassAudited by VirusTotal on May 11, 2026.
Overview
Type: OpenClaw Skill Name: vibe-clawing Version: 1.0.1 The skill bundle consists entirely of conceptual documentation and guidance for the user on how to interact with AI agents, along with two benign instructions for the agent to create/update markdown tracking files (`~/vibe-clawing/memory.md` and `~/vibe-clawing/loops.md`). There is no evidence of malicious intent, data exfiltration, unauthorized execution, persistence mechanisms, or prompt injection attempts designed to subvert the agent for harmful purposes. All file operations are confined to a dedicated directory within the user's home folder and involve non-executable markdown content, aligning with the stated purpose of tracking user progress.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If applied too broadly, an agent could take actions the user would normally want to approve first.
The skill explicitly encourages shifting decisions and actions to agents. This is central to the stated purpose, and the text includes guardrails, but users should not apply it blindly to sensitive or irreversible actions.
| Decision | You think | Agent decides (with guardrails) |\n| Action | You do | Agent executes |
Keep human approval for financial, legal, account, deployment, deletion, public-posting, or other high-impact actions unless there are explicit safeguards and rollback plans.
Unattended workflows can produce unwanted changes if the task scope, escalation rules, and stop conditions are unclear.
The skill promotes autonomous or unattended operation as a mindset. The artifacts do not implement background agents or hidden persistence, but the advice should be bounded by user-defined stopping conditions.
**The shift:** Work continues without you. Loops run whether you're watching or not.
Define what the agent may do unattended, when it must stop, when it must ask, how results are audited, and how changes can be reversed.
Private or outdated notes could affect future agent behavior if reused without review.
The skill asks for persistent local notes that may influence future delegation decisions. This is disclosed and purpose-aligned, but persistent notes can become stale or include sensitive context if the user adds it.
Track your vibe clawing journey in `~/vibe-clawing/memory.md`. Create on first use:
Avoid putting secrets or sensitive personal/business data in these notes, and periodically review or delete stale entries.