Agent Automation Scripter

PassAudited by ClawScan on May 10, 2026.

Overview

This instruction-only automation skill is coherent, but it may guide the agent to create persistent scheduled jobs and to rely on a local template file that was not included for review.

This skill appears safe to install as an instruction-only automation helper, but treat it as capable of producing powerful local scripts. Before allowing it to schedule cron/systemd jobs or run Bash commands, confirm the exact files, commands, schedule, logs, permissions, and cleanup steps.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Generated scripts or shell commands could modify files or system state.

Why it was flagged

The imported agent spec is oriented around broad local file and shell capabilities. That is expected for an automation scripter, but it can affect local files and execute commands if used without review.

Skill content
Original tools: `Read, Write, Edit, Bash, Grep, Glob, TodoWrite`
Recommendation

Review generated scripts and commands, especially writes, deletes, database changes, and commands run with elevated privileges.

What this means

The agent may use additional local instructions or templates that the review did not cover.

Why it was flagged

The skill depends on a local template/instruction file that is not included in the reviewed package. There is no evidence it is malicious, but its contents were not scanned here.

Skill content
**Skill Reference:** `~/.claude/skills/automation-patterns/SKILL.md`

Read the skill file for complete templates and patterns.
Recommendation

Inspect the referenced local skill file before relying on it, or ask the agent not to use external templates unless you approve them.

What this means

A cron job or systemd timer could keep running and making changes until disabled.

Why it was flagged

The skill’s purpose includes creating persistent scheduled automation. This is disclosed and purpose-aligned, but scheduled tasks can continue running after the original request.

Skill content
designed to run unattended via cron or systemd timers
Recommendation

Only create scheduled jobs with explicit user approval, document where they are installed, and provide a clear disable/remove command.