awakening-protocol

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI02: Tool Misuse and Exploitation

What this means

The agent may create local onboarding files and remove BOOTSTRAP.md after setup.

Why it was flagged

The skill changes local files and deletes a named bootstrap file, but it discloses this workflow and requires confirmation before saving the generated files.

Skill content

Show preview to user before file generation and get confirmation ... Then delete `BOOTSTRAP.md` if it exists.

Recommendation

Review the preview before confirming, and back up BOOTSTRAP.md first if it contains anything important.

Note

ASI06: Memory and Context Poisoning

What this means

Preferences, relationship details, and agent-behavior instructions saved during onboarding may influence future responses.

Why it was flagged

The template explicitly describes persistent memory and updates to SOUL.md, so conversation-derived preferences and instructions may be reused in later sessions.

Skill content

실수 → memory/에 기록
새로운 패턴 발견 → SOUL.md 업데이트
정기적으로 과거 기록 리뷰

Recommendation

Avoid putting secrets or highly sensitive personal details into the onboarding conversation, and review the generated files if behavior later seems wrong.