openclaw-skill-ideation
PassAudited by ClawScan on May 1, 2026.
Overview
This instruction-only planning skill appears purpose-aligned, but it may read project files and write planning documents under a scoped docs folder.
This skill looks safe for its stated use: turning rough ideas into planning documents. Before installing, be aware that it may inspect the current project codebase and create files under ./docs/ideation/, so use it only where that level of project access is appropriate.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Private or proprietary project code could be reviewed by the agent while preparing specs.
The skill may read local project files and use them as context for generated planning artifacts. This is purpose-aligned, but users should expect relevant repository content to be included in the agent's working context.
Use file reading and search to understand: ... Project structure ... Relevant existing code ... Configuration and build
Use it in the intended project directory and avoid invoking it on repositories containing secrets or unrelated sensitive files.
The agent may create or update planning documents in the local workspace.
The skill performs local file writes, but the destination is scoped to a documentation directory and the workflow requires explicit approval before continuing.
Create output directory: `./docs/ideation/{project-name}/`; Write `contract.md` ... Get explicit approval before proceedingReview the generated contract and specs before approving further work or using them for implementation.
