Autonomous Execution

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence
ASI01: Agent Goal Hijack
What this means

The agent may work through multiple non-sensitive subtasks on its own instead of stopping after each step.

Why it was flagged

The skill intentionally changes the agent's operating style toward completing tasks without repeated prompts, while also stating confirmation boundaries.

Skill content
Execute autonomously within clear limits. Finish the work, but confirm sensitive actions.
Recommendation

Use this skill when you want hands-off execution, and give clear task boundaries and explicit instructions for anything you want reviewed first.

What this means

The agent may read workspace files or perform searches/fetches during a task without asking each time.

Why it was flagged

The instructions permit autonomous use of existing read and fetch capabilities, but limit them to workspace/read-only use and separately require confirmation for sensitive actions.

Skill content
CAN do autonomously:
- Reading files in workspace
- Making read-only API calls (search, fetch)
- Processing data and generating output
- Using allowed tools within their permissions
- Retrying failed read operations
Recommendation

Keep the workspace narrow, avoid placing unrelated sensitive files in scope, and require confirmation for any external call if the task involves confidential information.

What this means

You have less external context for verifying who maintains the skill or how it changed between releases.

Why it was flagged

The registry information does not provide a source repository or homepage, so provenance is limited; the impact is reduced because the artifact set is instruction-only with no executable install components.

Skill content
Source: unknown
Homepage: none
Recommendation

Review the visible instructions before enabling it and verify the publisher if provenance matters for your environment.