v2.0.0

Mood Checkin

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 8:26 AM.

Analysis

This instruction-only mood check-in skill appears purpose-aligned, with the main thing to notice being that it saves a local mood-history profile.

GuidanceBefore installing, be comfortable with a local mood-checkin-profile.json file being created in the current working directory. Keep that directory private, especially if it is synced or part of a shared project, and delete the file if you want to reset the stored mood history.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Agentic Supply Chain Vulnerabilities

SeverityInfoConfidenceMediumStatusNote

_meta.json

"version": "1.0.0"

The included _meta.json declares version 1.0.0 while the submitted registry metadata declares version 2.0.0, which is a minor provenance/version consistency issue.

User impactThe package identity is slightly inconsistent, though there is no code or install step shown that would increase execution risk.

RecommendationConfirm the listed version and publisher before installing if exact provenance matters to you.

Sensitive data protection

Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.

Memory and Context Poisoning

SeverityLowConfidenceHighStatusNote

SKILL.md

At the start of every session, read the file `mood-checkin-profile.json` ... At the end of every session, write an updated `mood-checkin-profile.json`

The skill intentionally persists mood ratings, emotions, streaks, and history in a local profile file and reloads it in later sessions.

User impactYour emotional check-in history may be saved locally and reused in future sessions; if the working directory is shared or synced, that private mood data could become visible outside the chat.

RecommendationUse the skill from a private directory, review or delete mood-checkin-profile.json when desired, and avoid storing details you would not want saved locally.