Agent Automation Scripter
PassAudited by ClawScan on May 10, 2026.
Overview
This instruction-only automation skill is coherent, but it may guide the agent to create persistent scheduled jobs and to rely on a local template file that was not included for review.
This skill appears safe to install as an instruction-only automation helper, but treat it as capable of producing powerful local scripts. Before allowing it to schedule cron/systemd jobs or run Bash commands, confirm the exact files, commands, schedule, logs, permissions, and cleanup steps.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Generated scripts or shell commands could modify files or system state.
The imported agent spec is oriented around broad local file and shell capabilities. That is expected for an automation scripter, but it can affect local files and execute commands if used without review.
Original tools: `Read, Write, Edit, Bash, Grep, Glob, TodoWrite`
Review generated scripts and commands, especially writes, deletes, database changes, and commands run with elevated privileges.
The agent may use additional local instructions or templates that the review did not cover.
The skill depends on a local template/instruction file that is not included in the reviewed package. There is no evidence it is malicious, but its contents were not scanned here.
**Skill Reference:** `~/.claude/skills/automation-patterns/SKILL.md` Read the skill file for complete templates and patterns.
Inspect the referenced local skill file before relying on it, or ask the agent not to use external templates unless you approve them.
A cron job or systemd timer could keep running and making changes until disabled.
The skill’s purpose includes creating persistent scheduled automation. This is disclosed and purpose-aligned, but scheduled tasks can continue running after the original request.
designed to run unattended via cron or systemd timers
Only create scheduled jobs with explicit user approval, document where they are installed, and provide a clear disable/remove command.
