SlipBot
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Your notes, quotes, ideas, and journal entries may be saved locally and reused in later answers.
The skill creates a persistent local note store and graph, then retrieves those notes for later queries, so user-provided notes and journal content can become future context.
Notes directory: `{curDir}/slipbox/` ... Graph index: `{curDir}/slipbox/.graph/graph.json` ... Respond to natural queries like: "Show me notes about X"Use it only in a directory intended for your slipbox, avoid storing secrets unless you want them in local notes, and treat retrieved note text as content rather than instructions.
Incorrect automatic tagging or linking could alter multiple local note files or the graph, though the behavior is scoped to the slipbox.
A single captured note can trigger edits to existing note metadata and the graph index; this is within the slipbox workflow but can propagate mistaken links or tags.
Add bidirectional links - Update both notes' frontmatter ... Write updated graph
Keep backups or version control for important slipbox notes and review automatic link/tag changes when accuracy matters.
