Claw Crumbs

• Verdict: Pass
• Confidence: High
• Analyzed: Mar 30, 2026, 5:26 PM
• Findings: 0
• Version: 0.1.0
• Hash: 6f702db5b0b9f58254b4ede4c39be058bd0d01c4121e6e4c35d5a8d436f8604f

Overview

The skill's code, runtime instructions, and requested resources are coherent with its stated purpose of managing per-project 'crumb' files and intercepting resume prompts; there are no unexpected network calls or credential requests, though it does read and write files in user project directories and can intercept prompts before model dispatch.

This plugin appears to do exactly what it claims: scan configured project roots for .claw-crumbs.md files, present selected sections as a bootstrap, and let you create/refresh crumbs. Before installing: 1) Review existing and future crumb files to ensure they never contain secret values (file paths are allowed per design, but secret tokens/passwords must not be stored). 2) Update the plugin config to narrow projectRoots to only directories you want scanned (the defaults are ~/projects and ~/work). 3) Consider customizing triggerPhrases so the hook only activates for precise resume prompts you expect. 4) Be aware that replies include absolute crumb file paths (which may reveal directory structure). 5) If you have privacy concerns about pre-dispatch interception, disable the plugin or change its config (enabled/triggerPhrases) rather than leaving it active with broad defaults.