Chitin — Personality Persistence for AI Agents

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Stored insights or triggers may steer how the agent behaves in later conversations.

Why it was flagged

This shows the skill intentionally stores and reuses agent-personality context across sessions, which is the stated purpose but can influence future behavior if stale, overly broad, or poisoned insights are saved.

Skill content
On each session start, it injects a compact personality context so you pick up where you left off — not just factually, but as a *person*.
Recommendation

Review and prune stored Chitin insights regularly, avoid storing secrets or sensitive personal details, and treat externally imported or low-confidence insights cautiously.

What this means

Installing the npm package runs code that was not included in the provided artifact set.

Why it was flagged

The skill instructs users to install a global npm CLI package, but the provided review artifacts contain only SKILL.md and no package code, so the external package provenance is outside this scan.

Skill content
# Install
npm install -g @clawdactual/chitin
Recommendation

Verify the npm package, publisher, and GitHub repository before installing globally, and prefer pinned versions or a trusted environment.