openclaw-skill-ideation

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only planning skill appears purpose-aligned, but it may read project files and write planning documents under a scoped docs folder.

This skill looks safe for its stated use: turning rough ideas into planning documents. Before installing, be aware that it may inspect the current project codebase and create files under ./docs/ideation/, so use it only where that level of project access is appropriate.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Private or proprietary project code could be reviewed by the agent while preparing specs.

Why it was flagged

The skill may read local project files and use them as context for generated planning artifacts. This is purpose-aligned, but users should expect relevant repository content to be included in the agent's working context.

Skill content
Use file reading and search to understand: ... Project structure ... Relevant existing code ... Configuration and build
Recommendation

Use it in the intended project directory and avoid invoking it on repositories containing secrets or unrelated sensitive files.

What this means

The agent may create or update planning documents in the local workspace.

Why it was flagged

The skill performs local file writes, but the destination is scoped to a documentation directory and the workflow requires explicit approval before continuing.

Skill content
Create output directory: `./docs/ideation/{project-name}/`; Write `contract.md` ... Get explicit approval before proceeding
Recommendation

Review the generated contract and specs before approving further work or using them for implementation.