para-pkm
PassAudited by ClawScan on May 1, 2026.
Overview
This looks like a benign local organizer for PARA knowledge bases, but it can create/update navigation files and archive projects by removing the original file after copying it.
This skill is reasonable to use if you are comfortable with local scripts creating and updating files in your chosen knowledge-base folder. Run commands only against the intended PARA knowledge base, review generated AGENTS.md files, and back up important notes before using the archive command.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A mistaken archive command could remove the original note from its active location after creating the archived copy.
The archive script writes a copy into archives/ and then deletes the original selected file. This is aligned with the archive feature, but it is a local file mutation users should run carefully.
dest_file.write_text(archived_content) ... project_file.unlink()
Verify the project file and knowledge-base path before archiving, and back up important notes; a future hardening improvement would be to restrict this script to files under projects/active/.
Future agents may rely on the generated AGENTS.md, so misleading folder names or unwanted navigation content could affect how they search the knowledge base.
Local directory names are written into a persistent AI navigation file, typically AGENTS.md. This is intentional for the skill, but persistent navigation can influence later agent behavior.
nav_content += f" - {area}: `areas/{area}/`\n" ... output_path.write_text(nav_content)Review generated AGENTS.md files before relying on them, keep them navigation-only, and avoid putting instructions or secrets in folder names.