Back to skill
Skillv0.1.0
ClawScan security
Memory Tasks · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 12, 2026, 3:42 AM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- An instruction-only task-management skill that is internally consistent with its stated purpose and requests no installs, credentials, or elevated privileges.
- Guidance
- This skill is coherent and appears safe to install from an internal-consistency standpoint. Before using: confirm your agent/platform exposes the referenced Basic Memory APIs (write_note, search_notes, schema_validate), and be mindful of what you write into task 'context' (avoid pasting secrets, credentials, or sensitive file contents). Periodically run schema_validate and review stored task notes or access controls to ensure sensitive information isn't persisted unintentionally. If you want higher assurance, provide platform docs or confirm the exact API surface for the Basic Memory functions referenced.
Review Dimensions
- Purpose & Capability
- okThe name/description (task management using Basic Memory schemas) matches the SKILL.md: it documents a Task schema, how to create/search/update tasks, and how to flush before compaction. Nothing requested (no env vars, no installs) is unnecessary for that purpose.
- Instruction Scope
- okAll runtime instructions are limited to note operations (write_note, search_notes, schema_validate, schema_diff) and managing task content. The skill does not instruct reading unrelated system files or sending data to external endpoints. It does encourage including file paths and context in task notes, but it does not instruct the agent to read or exfiltrate those files.
- Install Mechanism
- okNo install spec and no code files — instruction-only. This is the lowest-risk install profile and is appropriate for the described behavior.
- Credentials
- okThe skill declares no required environment variables, credentials, or config paths. That is proportionate to an instruction-only skill that relies on built-in Basic Memory note APIs.
- Persistence & Privilege
- okalways is false and model invocation is allowed (platform default). The skill does not request forced inclusion or modification of other skills or system-wide settings.