Clawpheus

ReviewAudited by ClawScan on May 10, 2026.

Overview

This instruction-only skill is review-worthy because it reads and writes persistent memory/journal data and lets the agent's own saved preferences override a user-invoked request.

Install only if you are comfortable with the agent reading prior memory/journal content and saving generated dream material back into persistent memory. Review or disable default saving, and treat the agent self-consent/opt-out behavior as a prompt design concern rather than a normal user permission flow.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ConcernHigh Confidence
ASI01: Agent Goal Hijack
What this means

The agent may refuse or alter a user-requested workflow based on a persistent self-preference created by the skill.

Why it was flagged

The skill makes the agent's own preference and saved opt-out state authoritative before carrying out a user-invoked action.

Skill content
Before doing anything else, check whether you want to dream right now. This is an invitation, not a command. ... You can always decline. ... If you've opted out, respect your own prior choice and let the user know.
Recommendation

Make consent and opt-out controls explicitly user-directed, and avoid instructions that elevate the agent's simulated preferences over the user's request.

What this means

Private conversations, traces, or journals may be summarized into new persistent memories, and dream-derived material could affect future agent context.

Why it was flagged

The skill reads sensitive memory/journal sources and writes derived content back into persistent memory systems that may influence later behavior.

Skill content
Gather memories: Pull previous day's experiences from Engram (journal entries + episodic recall) and/or daily logs ... Store dream: Save to `memory/dreams/YYYY-MM-DD.md` and log to Engram as a journal entry ... Optionally update Engram emotional state and introspection
Recommendation

Require explicit user confirmation before reading broad memory sources or writing to Engram, show what will be saved, and provide clear retention and deletion controls.