Morning

PassAudited by ClawScan on May 10, 2026.

Overview

This looks like a coherent journaling and planning skill, but it can read and edit your journal files, pull Brain tasks/projects, and save conversation details into daily notes.

Install this if you want OpenClaw to manage the documented journal/inbox structure and read Brain tasks/projects during planning. Review the generated journal entries, avoid using it for highly sensitive conversations unless you are comfortable with local logging, and consider limiting Bash access if not needed.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the agent used the Bash capability, it could run local shell commands beyond simply updating journal files, although the artifacts do not instruct it to do so.

Why it was flagged

File read/edit tools are expected for a journaling skill, but unrestricted Bash is broader than the visible instructions require.

Skill content
allowed-tools: Read, Edit, Write, Glob, Grep, Bash, AskUserQuestion, mcp__claude_ai_Actions_Team__listActions, mcp__claude_ai_Actions_Team__listProjects
Recommendation

Use the skill in the intended workspace and consider removing or restricting Bash if shell access is not needed for date/path handling.

What this means

Your Brain tasks and projects may be brought into the agent's working context during morning planning.

Why it was flagged

The skill uses the user's configured Brain MCP access to read task and project data, which is disclosed and purpose-aligned.

Skill content
This skill uses `mcp__claude_ai_Actions_Team__listActions` and `mcp__claude_ai_Actions_Team__listProjects` to pull tasks and projects from Brain at the start of each session.
Recommendation

Confirm Brain MCP is connected to the intended account/workspace before using the skill.

What this means

Sensitive or personal conversation details could be saved in your journal if the agent considers them log-worthy.

Why it was flagged

The skill can persist selected conversation content into a local journal without asking first, which is aligned with journaling but important for privacy.

Skill content
When something log-worthy comes up in conversation:
- Add it to today's journal and say "Added to log: [brief summary]"
- No need to ask permission — keep the conversation flowing
Recommendation

Tell the agent not to log sensitive topics, or review the journal after sessions where private information was discussed.