Back to skill
v1.0.0

Multi-viewpoint Debates

ReviewClawScan verdict for this skill. Analyzed May 1, 2026, 4:53 AM.

Analysis

The skill is mostly coherent, but its helper script prints copy-paste shell commands with the user’s debate topic inserted unescaped, which could change what runs if the topic contains shell syntax.

GuidanceReview the helper script before using it. If you run it, avoid topics containing quotes, backticks, `$()`, semicolons, or pasted untrusted text, because the generated commands are meant to be copied into a shell. Treat saved debate archives as private records of your decisions.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Unexpected Code Execution
SeverityMediumConfidenceHighStatusConcern
scripts/run-debate.sh
echo "Copy and run these three commands in sequence:" ... clawdbot sessions_spawn --task "... **Decision**: EOF

echo "$TOPIC"

The script prints shell commands for the user to copy and run, while inserting the raw topic inside a double-quoted command argument. If the topic contains quotes, command substitutions, or shell separators, the generated command can be altered when pasted into a shell.

User impactA malformed or untrusted debate topic could cause the copied command to run something other than the intended Clawdbot session spawn command.
RecommendationDo not paste generated commands for topics containing shell metacharacters. The maintainer should escape the topic with a shell-safe method, avoid generating shell text, or execute `clawdbot` directly with properly quoted arguments.
Rogue Agents
SeverityLowConfidenceHighStatusNote
SKILL.md
Spawn three isolated sub-agent personas with conflicting worldviews to debate any decision.

Creating additional agent sessions is the core feature and is clearly disclosed, but it means using the skill can trigger multiple autonomous model sessions for one user request.

User impactUsing the skill may create multiple agent sessions, which can increase cost, time, and transcript volume.
RecommendationUse it intentionally for decisions where three separate perspectives are worth the added sessions, and review each spawned task before running it.
Human-Agent Trust Exploitation
SeverityInfoConfidenceMediumStatusNote
SKILL.md
Automatically captures debate outputs to an archive for future reference and pattern analysis.

The description suggests automatic capture, while the workflow later says to manually collect responses, create a markdown file, and update an index. This is a capability/retention ambiguity rather than evidence of hidden capture.

User impactUsers may misunderstand whether debate outputs are saved automatically or only when they manually archive them.
RecommendationClarify whether archiving is automatic or manual, and state exactly where debate outputs are stored.
Sensitive data protection

Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.

Memory and Context Poisoning
SeverityLowConfidenceHighStatusNote
SKILL.md
Your debates live in a searchable archive ... Over time, your archive becomes a personal decision-making manual.

The skill encourages persistent storage and future reuse of debate outputs. This is disclosed and user-controlled, but those files may contain sensitive decision context.

User impactPrivate business, personal, or strategic decisions may be retained in local markdown files and reused later.
RecommendationStore archives in a location you control, avoid including secrets or highly sensitive context, and periodically review or delete old debate files.