task-assessor

AdvisoryAudited by Static analysis on May 8, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence
ASI01: Agent Goal Hijack
What this means

Tasks classified as simple or ordinary may proceed under the agent’s normal permissions without an extra assessment confirmation, while more complex tasks should trigger a report and confirmation request.

Why it was flagged

The skill sets a difficulty-based stopping and confirmation policy for the agent. This is disclosed and purpose-aligned, but it can influence whether the agent proceeds immediately or asks the user first.

Skill content
L1 或 L2 → 直接执行,不需要确认 ... L3、L4 或 L5 → 先输出评估报告 ... 是否继续执行?
Recommendation

Treat the difficulty estimate as advisory and keep normal approval safeguards for actions that change files, accounts, messages, payments, or public content, regardless of the assigned L-level.