Mental Atlas

AdvisoryAudited by Static analysis on May 12, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI02: Tool Misuse and Exploitation

What this means

If you ask it to process a local file or URL, the agent may load that material into the conversation for analysis.

Why it was flagged

The skill can read local files and fetch web content, which is expected for processing file paths and URLs but is still a capability users should understand.

Skill content

allowed-tools:
  - Read
  - WebFetch

Recommendation

Only provide files or URLs you are comfortable having analyzed by the agent.

NoteHigh Confidence

ASI02: Tool Misuse and Exploitation

What this means

A user-directed file path may cause the agent to read that file for summarization or distillation.

Why it was flagged

The skill instructs the agent to load user-provided local file paths. This is purpose-aligned for distillation, and the artifact does not show automatic broad file scanning.

Skill content

File path (starts with `/` or `~`, or ends with `.md`/`.txt`/`.pdf`) | Use Read tool to load, then process

Recommendation

Check that the requested path points only to the intended document and not to private or unrelated files.