MIT Reasoning Lite
v1.0.0Provides a 3-step reasoning scaffold prompting agents to clarify objectives, check constraints, and articulate reasoning before significant decisions.
⭐ 0· 92·0 current·0 all-time
by@kgapol
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (a small reasoning scaffold) matches the provided SKILL.md: it only defines a 3-step prompt and guidance for where to paste it. There are no unexpected binaries, env vars, or external credentials requested.
Instruction Scope
SKILL.md only instructs agents to clarify objectives, check constraints, and state reasoning before acting. It does not ask the agent to read unrelated files, access secrets, or send data to external endpoints.
Install Mechanism
There is no registry install spec (instruction-only), but the bundle contains install.sh which creates $HOME/.mit-reasoning and copies files into it. The script performs only local file operations and prints instructions. However, install.sh attempts to copy USAGE.md and README.md which are not present in the package (cp will fail due to set -e), so the installer is inconsistent/buggy — this is an integrity/packaging issue rather than malicious behavior.
Credentials
The skill requests no environment variables, credentials, or config paths. There are no hidden credential accesses in SKILL.md or install.sh.
Persistence & Privilege
always is false and the skill is user-invocable only. The installer would create a dot-directory under the user's home (normal for local tools) but the skill does not request permanent elevated privileges or alter other skills' configs.
Assessment
This skill appears to be what it says: a small prompt scaffold you can paste into agent skill files. Before running install.sh, inspect it (it's short) and be aware it will create $HOME/.mit-reasoning and try to copy additional files (USAGE.md, README.md) that are not included — the script will likely fail as-is due to missing files. There are no network calls or credential requests. If you only want the prompt, you can safely copy SKILL.md manually into your agent workspace instead of running the installer. If you do run the script, run it in a safe environment (or remove the cp lines for missing files) and verify any external links or commercial references before following them.Like a lobster shell, security has layers — review code before you run it.
latestvk97fxz2awbfs5v7691n5p4eg3h83xta3
License
MIT-0
Free to use, modify, and redistribute. No attribution required.