SlipBot
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: Developer: Version: Description: OpenClaw Agent Skill The skill is designed for local note management, requiring file system read/write operations within its designated `slipbox` directory. It explicitly instructs the agent to execute `pwd` to determine its current working directory for configuration, which is a plausible and limited use of shell access. Crucially, the `SKILL.md` explicitly states 'No external API calls', significantly reducing the risk of data exfiltration. There is no evidence of malicious intent, unauthorized access, persistence mechanisms, or prompt injection attempts to subvert the agent's core function or user interaction.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Your notes, quotes, ideas, and journal entries may be saved locally and reused in later answers.
The skill creates a persistent local note store and graph, then retrieves those notes for later queries, so user-provided notes and journal content can become future context.
Notes directory: `{curDir}/slipbox/` ... Graph index: `{curDir}/slipbox/.graph/graph.json` ... Respond to natural queries like: "Show me notes about X"Use it only in a directory intended for your slipbox, avoid storing secrets unless you want them in local notes, and treat retrieved note text as content rather than instructions.
Incorrect automatic tagging or linking could alter multiple local note files or the graph, though the behavior is scoped to the slipbox.
A single captured note can trigger edits to existing note metadata and the graph index; this is within the slipbox workflow but can propagate mistaken links or tags.
Add bidirectional links - Update both notes' frontmatter ... Write updated graph
Keep backups or version control for important slipbox notes and review automatic link/tag changes when accuracy matters.