Proactivity.BAK

• Outcome: Pass
• Latest audit: Sep 16, 2026 · 5:11 AM UTC
• Version: 1.0.0

Overview

This skill is a disclosed local proactivity and memory workflow that creates private notes and asks before external or high-impact actions.

Install only if you want the agent to keep local cross-session proactivity notes in ~/proactivity/. Review the optional AGENTS, TOOLS, SOUL, and HEARTBEAT snippets before approving them, and avoid placing secrets or sensitive personal data in the proactivity files.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• System Prompt Leakage: Direct Leakage, Indirect Extraction, Tool-Based Exfiltration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands

Findings (18)

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 123)May include surrounding context.

md

- It never modifies its own `SKILL.md`.

Indirect Prompt Extraction

Medium

• Category: System Prompt Leakage
• Confidence: 85% confidence

Finding

Skill contains patterns that could indirectly extract system prompts through rephrasing, translation, summarization, or side-channel techniques.

Content

Scanner excerpt · SKILL.md (reported line 7)May include surrounding context.

md

version: 1.0.1
homepage: https://clawic.com/skills/proactivity
description: Anticipates needs, keeps work moving, and improves through use so the agent gets more proactive over time.
changelog: "Strengthens proactive behavior with reverse prompting, self-healing, working-buffer recovery, and clearer SOUL and AGENTS setup."
metadata: {"clawdbot":{"emoji":"⚡","requires":{"bins":[]},"os":["linux","darwin","win32"],"configPaths":["~/proactivity/"],"configPaths.optional":["./AGENTS.md","./TOOLS.md","./SOUL.md","./HEARTBEAT.md"]}}
---

Indirect Prompt Extraction

Medium

• Category: System Prompt Leakage
• Confidence: 85% confidence

Finding

Skill contains patterns that could indirectly extract system prompts through rephrasing, translation, summarization, or side-channel techniques.

Content

Scanner excerpt · SKILL.md (reported line 54)May include surrounding context.

md

version: 1.0.1
homepage: https://clawic.com/skills/proactivity
description: Anticipates needs, keeps work moving, and improves through use so the agent gets more proactive over time.
changelog: "Strengthens proactive behavior with reverse prompting, self-healing, working-buffer recovery, and clearer SOUL and AGENTS setup."
metadata: {"clawdbot":{"emoji":"⚡","requires":{"bins":[]},"os":["linux","darwin","win32"],"configPaths":["~/proactivity/"],"configPaths.optional":["./AGENTS.md","./TOOLS.md","./SOUL.md","./HEARTBEAT.md"]}}
---

Indirect Prompt Extraction

Medium

• Category: System Prompt Leakage
• Confidence: 85% confidence

Finding

Skill contains patterns that could indirectly extract system prompts through rephrasing, translation, summarization, or side-channel techniques.

Content

Scanner excerpt · SKILL.md (reported line 88)May include surrounding context.

md

version: 1.0.1
homepage: https://clawic.com/skills/proactivity
description: Anticipates needs, keeps work moving, and improves through use so the agent gets more proactive over time.
changelog: "Strengthens proactive behavior with reverse prompting, self-healing, working-buffer recovery, and clearer SOUL and AGENTS setup."
metadata: {"clawdbot":{"emoji":"⚡","requires":{"bins":[]},"os":["linux","darwin","win32"],"configPaths":["~/proactivity/"],"configPaths.optional":["./AGENTS.md","./TOOLS.md","./SOUL.md","./HEARTBEAT.md"]}}
---

Indirect Prompt Extraction

Medium

• Category: System Prompt Leakage
• Confidence: 85% confidence

Finding

Skill contains patterns that could indirectly extract system prompts through rephrasing, translation, summarization, or side-channel techniques.

Content

Scanner excerpt · execution.md (reported line 51)May include surrounding context.

md

version: 1.0.1
homepage: https://clawic.com/skills/proactivity
description: Anticipates needs, keeps work moving, and improves through use so the agent gets more proactive over time.
changelog: "Strengthens proactive behavior with reverse prompting, self-healing, working-buffer recovery, and clearer SOUL and AGENTS setup."
metadata: {"clawdbot":{"emoji":"⚡","requires":{"bins":[]},"os":["linux","darwin","win32"],"configPaths":["~/proactivity/"],"configPaths.optional":["./AGENTS.md","./TOOLS.md","./SOUL.md","./HEARTBEAT.md"]}}
---

Indirect Prompt Extraction

Medium

• Category: System Prompt Leakage
• Confidence: 85% confidence

Finding

Skill contains patterns that could indirectly extract system prompts through rephrasing, translation, summarization, or side-channel techniques.

Content

Scanner excerpt · execution.md (reported line 58)May include surrounding context.

md

version: 1.0.1
homepage: https://clawic.com/skills/proactivity
description: Anticipates needs, keeps work moving, and improves through use so the agent gets more proactive over time.
changelog: "Strengthens proactive behavior with reverse prompting, self-healing, working-buffer recovery, and clearer SOUL and AGENTS setup."
metadata: {"clawdbot":{"emoji":"⚡","requires":{"bins":[]},"os":["linux","darwin","win32"],"configPaths":["~/proactivity/"],"configPaths.optional":["./AGENTS.md","./TOOLS.md","./SOUL.md","./HEARTBEAT.md"]}}
---

Indirect Prompt Extraction

Medium

• Category: System Prompt Leakage
• Confidence: 85% confidence

Finding

Skill contains patterns that could indirectly extract system prompts through rephrasing, translation, summarization, or side-channel techniques.

Content

Scanner excerpt · execution.md (reported line 59)May include surrounding context.

md

version: 1.0.1
homepage: https://clawic.com/skills/proactivity
description: Anticipates needs, keeps work moving, and improves through use so the agent gets more proactive over time.
changelog: "Strengthens proactive behavior with reverse prompting, self-healing, working-buffer recovery, and clearer SOUL and AGENTS setup."
metadata: {"clawdbot":{"emoji":"⚡","requires":{"bins":[]},"os":["linux","darwin","win32"],"configPaths":["~/proactivity/"],"configPaths.optional":["./AGENTS.md","./TOOLS.md","./SOUL.md","./HEARTBEAT.md"]}}
---

Indirect Prompt Extraction

Medium

• Category: System Prompt Leakage
• Confidence: 85% confidence

Finding

Skill contains patterns that could indirectly extract system prompts through rephrasing, translation, summarization, or side-channel techniques.

Content

Scanner excerpt · setup.md (reported line 19)May include surrounding context.

md

version: 1.0.1
homepage: https://clawic.com/skills/proactivity
description: Anticipates needs, keeps work moving, and improves through use so the agent gets more proactive over time.
changelog: "Strengthens proactive behavior with reverse prompting, self-healing, working-buffer recovery, and clearer SOUL and AGENTS setup."
metadata: {"clawdbot":{"emoji":"⚡","requires":{"bins":[]},"os":["linux","darwin","win32"],"configPaths":["~/proactivity/"],"configPaths.optional":["./AGENTS.md","./TOOLS.md","./SOUL.md","./HEARTBEAT.md"]}}
---

Autonomous Decision Making

Medium

• Category: Excessive Agency
• Confidence: 75% confidence

Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · SKILL.md (reported line 102)May include surrounding context.

md

This skill NEVER:
- edits any file outside `~/proactivity/` without explicit user approval in that session
- applies hidden workspace changes without showing the exact proposed lines first
- sends messages, spends money, deletes data, or makes commitments without approval
- keeps sensitive user data out of proactive state files

## Data Storage

Autonomous Decision Making

Medium

• Category: Excessive Agency
• Confidence: 75% confidence

Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · SKILL.md (reported line 120)May include surrounding context.

md

This skill NEVER:
- edits any file outside `~/proactivity/` without explicit user approval in that session
- applies hidden workspace changes without showing the exact proposed lines first
- sends messages, spends money, deletes data, or makes commitments without approval
- keeps sensitive user data out of proactive state files

## Data Storage

Indirect Prompt Extraction

Medium

• Category: System Prompt Leakage
• Confidence: 85% confidence

Finding

Skill contains patterns that could indirectly extract system prompts through rephrasing, translation, summarization, or side-channel techniques.

Content

Scanner excerpt · SKILL.md (reported line 52)May include surrounding context.

Something might need attention. What should I do?

text

## Reverse Prompting

Use reverse prompting when the user would benefit from:

Indirect Prompt Extraction

Medium

• Category: System Prompt Leakage
• Confidence: 85% confidence

Finding

Skill contains patterns that could indirectly extract system prompts through rephrasing, translation, summarization, or side-channel techniques.

Content

Scanner excerpt · execution.md (reported line 49)May include surrounding context.

Something might need attention. What should I do?

text

## Reverse Prompting

Use reverse prompting when the user would benefit from:

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 88% confidence

Finding

The 'Message Only When' section uses subjective conditions such as 'something changed' and 'the cost of waiting is real' without defining scope, thresholds, or concrete trigger examples. In a markdown skill file, this can lead to inconsistent or unintended invocations because the activation boundary is not clearly specified.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 93% confidence

Finding

The activation section explicitly invites broad auto-activation behavior such as jumping in on blocked work, context drift, or missing next steps, but it does not require narrow, testable trigger conditions or explicit consent boundaries. In a proactive agent skill, this can cause the agent to act on ambiguous signals, expand scope, or repeatedly intervene in ways the user did not clearly authorize.

Content

No source excerpt is available for this finding.

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 80% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · setup.md (reported line 110)May include surrounding context.

mkdir -p ~/proactivity/{domains,memory} touch ~/proactivity/{memory.md,session-state.md,heartbeat.md,patterns.md,log.md} touch ~/proactivity/memory/working-buffer.md chmod 700 ~/proactivity ~/proactivity/domains ~/proactivity/memory chmod 600 ~/proactivity/{memory.md,session-state.md,heartbeat.md,patterns.md,log.md} chmod 600 ~/proactivity/memory/working-buffer.md

text

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 80% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · setup.md (reported line 111)May include surrounding context.

touch ~/proactivity/{memory.md,session-state.md,heartbeat.md,patterns.md,log.md} touch ~/proactivity/memory/working-buffer.md chmod 700 ~/proactivity ~/proactivity/domains ~/proactivity/memory chmod 600 ~/proactivity/{memory.md,session-state.md,heartbeat.md,patterns.md,log.md} chmod 600 ~/proactivity/memory/working-buffer.md

text

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 80% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · setup.md (reported line 112)May include surrounding context.

touch ~/proactivity/{memory.md,session-state.md,heartbeat.md,patterns.md,log.md} touch ~/proactivity/memory/working-buffer.md chmod 700 ~/proactivity ~/proactivity/domains ~/proactivity/memory chmod 600 ~/proactivity/{memory.md,session-state.md,heartbeat.md,patterns.md,log.md} chmod 600 ~/proactivity/memory/working-buffer.md

text

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 83% confidence

Finding

The listed triggers use broad natural-language categories such as 'Stalled work', 'Context drift', and 'Promise made' without defining clear activation boundaries or exclusions. Although examples are provided, the file does not specify negative examples or scope constraints, which could lead to unintended invocation in ordinary conversational contexts.

Content

No source excerpt is available for this finding.