Taku Compact
PassAudited by ClawScan on May 11, 2026.
Overview
This instruction-only skill is coherent and benign, but it will inspect your project/session state and save a local summary in .taku.
This appears safe for its intended purpose, but generated briefs can include local diffs, decisions, command results, and conversation context. Review `.taku/context/current.md` and timestamped compact files before committing, syncing, or sharing them.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may inspect local repository state and changed-file content to summarize active work.
The skill instructs the agent to run local git/file inspections. This is purpose-aligned for producing an accurate work brief, but users should know repo changes and diffs may be read.
Inspect git and file-system evidence when a repo is available: - `git status --short` - `git diff --stat` - `git diff --name-only` - relevant `git diff` hunks
Use the skill in repositories where you are comfortable having the current diff and project context summarized; review generated briefs before sharing them.
Briefs may remain on disk and influence future handoffs or agent work if they are inaccurate or contain sensitive details.
The skill creates persistent local context files that may later be reused by users or agents. This is disclosed and scoped, but stored summaries can contain sensitive project/session details or stale claims.
Default persistence: 1. Create `.taku/context/` if needed. 2. Write the latest brief to `.taku/context/current.md`. 3. Write the same brief to `.taku/context/compact-YYYYMMDD-HHMMSS.md`.
Review `.taku/context` briefs periodically, avoid including secrets, and delete or edit stale summaries before sharing the project.
