Fabric Bridge

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only bridge is coherent and purpose-aligned, but users should notice that it relies on the external Fabric CLI, API keys, community pattern updates, and optional saved contexts or sessions.

This skill appears safe to install if you intend to use the Fabric CLI. Before using it, verify the Homebrew package/source, configure only the provider keys you are comfortable using, prefer dry runs for sensitive prompts, and be cautious with community patterns, saved sessions, contexts, and file/image inputs.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The Fabric CLI may be able to use the user's configured AI provider account and incur usage or expose submitted prompts to that provider.

Why it was flagged

The skill explicitly requires configuring API keys for the external Fabric CLI. This is expected for an AI-provider integration, but it gives the CLI access to whichever provider account or quota the user configures.

Skill content
First-time setup: run `fabric-ai -S` to configure API keys.
Recommendation

Use a dedicated or revocable API key where possible, confirm which provider is configured, and avoid submitting sensitive content unless that provider use is acceptable.

What this means

Updated community patterns may change how the CLI transforms, summarizes, or analyzes user-provided content.

Why it was flagged

Fabric patterns are described as reusable system prompts, and the skill recommends updating community patterns. That is central to Fabric usage, but it means prompt behavior can change based on external pattern updates.

Skill content
Run `fabric-ai -U` periodically to get new community patterns.
Recommendation

Install and update Fabric from trusted sources, and review unfamiliar patterns before using them with sensitive or high-impact inputs.

What this means

Saved contexts, sessions, or custom prompts may affect later Fabric runs and could accidentally carry forward sensitive or misleading information.

Why it was flagged

The instructions document reusable contexts, sessions, and local custom system prompts. These are purpose-aligned Fabric features, but persistent or reusable context can influence future outputs if users store sensitive or untrusted content there.

Skill content
Use context: `echo "input" | fabric-ai -p <pattern> -C my_context -s`; Session continuity: `echo "input" | fabric-ai -p <pattern> --session my_session -s`; Custom Patterns: `~/.config/fabric/patterns/<name>/system.md`.
Recommendation

Use named contexts and sessions intentionally, keep sensitive material out of reusable contexts unless needed, and review custom pattern files before relying on them.