SkillNote Doctor

PassAudited by ClawScan on May 11, 2026.

Overview

This is a read-only diagnostic skill that checks local OpenClaw/SkillNote setup and contacts the configured SkillNote host, with no evidence of deceptive, destructive, or hidden behavior.

This skill appears safe for diagnosing SkillNote/OpenClaw setup problems. Before running it, make sure your SkillNote config points to a host you trust, and remember that it will inspect local OpenClaw files and make limited health-check requests to that host.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Running the skill may cause the agent to execute a harmless local binary lookup and contact the SkillNote host configured on your machine.

Why it was flagged

The skill asks the agent to use local command and HTTP tools. These actions are expected for a setup diagnostic and are limited to checking the configured service.

Skill content
Run: `which clawhub` ... GET `<host>/v1/skills?limit=1` ... POST `<host>/v1/openclaw/context-bundle` with body `{"task_summary": "doctor health check", "max_skills": 1}`
Recommendation

Use it when diagnosing SkillNote/OpenClaw setup issues, and verify that the configured host is a server you trust.

What this means

The agent will inspect a local OpenClaw workspace instruction file during diagnosis.

Why it was flagged

The skill reads a persistent agent instruction/configuration file, but only to check for a specific marker and not to treat the file's contents as instructions.

Skill content
Read `~/.openclaw/workspace/AGENTS.md`. Check for exact string `<skillnote v1>`.
Recommendation

Do not allow unrelated instructions inside AGENTS.md to change the diagnostic task; the check should only verify whether the marker exists.