ADHD Body Doubling

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI05: Unexpected Code Execution

What this means

If you run the standalone script, it will prompt you for session details and create local history files.

Why it was flagged

The skill includes a user-directed shell script for standalone sessions. This is disclosed and aligned with the focus-session purpose, but it is still local code execution the user should choose intentionally.

Skill content

Or run standalone:
```bash
chmod +x scripts/start-session.sh
./scripts/start-session.sh 50
```

Recommendation

Run the script only if you want standalone mode, and review or delete its local history files if they contain sensitive task details.

NoteHigh Confidence

ASI06: Memory and Context Poisoning

What this means

Your work plans, blockers, and focus-pattern details may remain on your machine after a session.

Why it was flagged

The script stores user-entered task descriptions, micro-steps, and energy level in persistent local JSON history. This supports the stated history-tracking feature, but may include sensitive personal or business context.

Skill content

SESSION_DIR="${HOME}/.openclaw/skills/adhd-body-doubling/history"
...
"task_description": "$TASK_ESC",
"first_microstep": "$MICROSTEP_ESC",
"smallest_step": "$SMALLEST_ESC",
"energy_start": ${ENERGY_START:-5}

Recommendation

Avoid entering confidential details you do not want retained, and periodically review or clear ~/.openclaw/skills/adhd-body-doubling/history/.