Maverick Process To Skill

PassAudited by ClawScan on May 13, 2026.

Overview

This instruction-only skill is coherent and purpose-aligned, but users should understand that it can create persistent local skills from user-confirmed workflows.

This skill appears benign and instruction-only. Before saving a generated workflow, review it for secrets, private data, and unintended future actions, because saved skills persist locally and can be reused by the agent later.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence
ASI10: Rogue Agents
What this means

A workflow the user approves may become a reusable local skill that can be invoked later.

Why it was flagged

The skill can create persistent local agent instructions, which is expected for its purpose but affects future agent behavior.

Skill content
If the user says yes, create a new skill folder with a trigger-focused `description`, concise workflow instructions, and `agents/openai.yaml` metadata.
Recommendation

Only save workflows you actually want reused, and review the generated skill before relying on it.

What this means

Information or procedural instructions included in a saved process may be reused later by the agent.

Why it was flagged

The skill stores user-described workflow content as reusable instructions, so sensitive details or unsafe instructions included by the user could persist into future use.

Skill content
When saving a process, capture:
- Goal: What business outcome this process produces.
- Inputs: Required user-provided data.
- Steps: Deterministic sequence to run.
Recommendation

Avoid saving secrets, private customer data, or unreviewed instructions inside generated skills.

What this means

If the described process involves changing files, accounts, or business records, the agent may try to carry out those steps.

Why it was flagged

The skill is intentionally broad because it automates user-described processes; this is purpose-aligned, but any risky external effects depend on what process the user provides.

Skill content
Execute or automate the process for the current request.
Recommendation

For processes that modify important data or external systems, ask the agent to show the planned steps and get explicit approval before execution.