Taku Think

AdvisoryAudited by Static analysis on May 11, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may read nearby project documentation/configuration and create or update a DESIGN.md before planning or building.

Why it was flagged

The skill directs the agent to inspect local project context and create a design document. This is aligned with design planning and scoped to relevant files, but it is still local file access and file creation.

Skill content
read the directly relevant project docs/config/files ... write `DESIGN.md`
Recommendation

Use it in project folders where this access is acceptable, and review the generated design before approving any handoff to build or plan steps.

What this means

Product decisions or other discussion details may be saved locally in the project.

Why it was flagged

The skill may persist local exploration notes. The behavior is disclosed and scoped, but durable notes can remain available for later sessions or users.

Skill content
Record useful exploration notes in `.taku/explore-{date}.md` only when the session produces decisions worth preserving.
Recommendation

Avoid including secrets or sensitive personal data in exploration notes, and review or delete .taku notes when they are no longer needed.