SlipBot

PassAudited by ClawScan on May 1, 2026.

Overview

SlipBot appears aligned with its local note-taking purpose, but it will save and edit local slipbox note and graph files automatically when its prefixes are used.

This skill is reasonable for a local note system. Before installing, be aware that prefixed messages can be captured into local files, existing slipbox note metadata may be updated, and the graph will persist for later searches.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Your notes, quotes, ideas, and journal entries may be saved locally and reused in later answers.

Why it was flagged

The skill creates a persistent local note store and graph, then retrieves those notes for later queries, so user-provided notes and journal content can become future context.

Skill content
Notes directory: `{curDir}/slipbox/` ... Graph index: `{curDir}/slipbox/.graph/graph.json` ... Respond to natural queries like: "Show me notes about X"
Recommendation

Use it only in a directory intended for your slipbox, avoid storing secrets unless you want them in local notes, and treat retrieved note text as content rather than instructions.

What this means

Incorrect automatic tagging or linking could alter multiple local note files or the graph, though the behavior is scoped to the slipbox.

Why it was flagged

A single captured note can trigger edits to existing note metadata and the graph index; this is within the slipbox workflow but can propagate mistaken links or tags.

Skill content
Add bidirectional links - Update both notes' frontmatter ... Write updated graph
Recommendation

Keep backups or version control for important slipbox notes and review automatic link/tag changes when accuracy matters.