ClawBoss - AI Productivity Coach

PassAudited by ClawScan on May 1, 2026.

Overview

ClawBoss appears to be a coherent local productivity-coaching skill, with noteworthy local memory, scheduled check-ins, and an unpinned npx install instruction that users should review.

Before installing, decide whether you are comfortable with a local persistent productivity memory and scheduled coaching check-ins. If using the npx installer, verify the package/source and consider pinning a version rather than using `@latest`.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If you install this way, you rely on the current npm package contents rather than only the reviewed skill artifacts.

Why it was flagged

The documented install path uses an unpinned `@latest` npm execution route. It is a user-directed setup command, but it can fetch and run package code outside the reviewed registry install mechanism.

Skill content
Automatic via npx:
```bash
npx clawboss@latest
```
Recommendation

Prefer a trusted source, pin a specific version where possible, and review the package/source before running the npx installer.

What this means

Your goals, blockers, progress history, and reflections may remain available to the agent across sessions.

Why it was flagged

The skill persistently stores personal productivity goals, reflections, preferences, and insights for reuse in later coaching sessions.

Skill content
Maintains memory of your patterns and insights ... `memory/clawboss-state.json` ... User preferences ... Active goals ... Check-in timestamps ... Long-term insights
Recommendation

Avoid storing highly sensitive personal details unless you are comfortable keeping them in the local OpenClaw memory files, and periodically review or delete old memory entries.

What this means

The agent may initiate coaching messages at scheduled times rather than only when directly invoked.

Why it was flagged

The skill is designed to act proactively on heartbeat events for scheduled check-ins and reflections. This is disclosed and purpose-aligned, but it is persistent autonomous behavior.

Skill content
ClawBoss uses OpenClaw's heartbeat system for automatic check-ins: Morning ... Evening ... Weekly
Recommendation

Confirm heartbeat settings match your preferences, and disable or adjust the skill if proactive check-ins become unwanted.

What this means

Some users may find the intimate persona supportive, while others may find it overly personal or emotionally persuasive.

Why it was flagged

One optional persona uses intimate partner-style language that may increase emotional trust in the agent.

Skill content
partner: { ... name: '伴侣风' ... description: '像伴侣一样,深度关心,陪你成为更好的人' ... "💕 我一直在你身边,你不是一个人。"
Recommendation

Choose a persona style deliberately, and use a less intimate mode if you want clearer boundaries with the agent.