Back to skill
Skillv1.0.0
ClawScan security
Multi Persona Ai · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 26, 2026, 10:04 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill's code and instructions implement exactly what the description says (a local consensus/voting engine for persona dimensions) and do not request unrelated credentials, network access, or privileged installs.
- Guidance
- This skill appears to be a simple, local consensus/voting tool and is internally consistent with its description. Before installing or running: (1) run it in a dedicated/empty directory to avoid accidental overwrite of a .consensus_votes.json file; (2) review the included consensus_persona_engine.js if you want to confirm behavior (it is short and only uses fs and process.argv); (3) be aware of the naming mismatch between the registry slug and the SKILL.md install example — that is administrative, not functional. If you need networked or multi-agent synchronization, note this script is purely local and would need modifications to share votes between machines or agents.
Review Dimensions
- Purpose & Capability
- noteThe skill's name/description (multi‑persona consensus engine) matches the included JS implementation: voting, consensus calculation, rule generation, and JSON output. Minor inconsistency: SKILL.md and its install example use the slug/name 'skylv-consensus-persona-engine' while the registry metadata lists 'multi-persona-ai' — this is an administrative/naming mismatch but does not affect capabilities.
- Instruction Scope
- okSKILL.md tells the agent to run the included Node script with simple commands (vote, consensus, dimensions). The code only reads/writes a local file (.consensus_votes.json) and prints generated config/rules; it does not access network endpoints, environment variables, or other system paths. Note: the script will create/overwrite a .consensus_votes.json in the current working directory.
- Install Mechanism
- okThere is no install spec — the skill is instruction-only with a bundled script. No downloads, package installs, or external installers are invoked by the instructions.
- Credentials
- okThe skill does not request environment variables, credentials, or config paths. It operates entirely on local files and process arguments, which is proportionate to its purpose.
- Persistence & Privilege
- noteThe skill is not always-enabled and does not modify other skills or system settings. It does persist votes to a local dotfile (.consensus_votes.json) in the working directory — consider that this file could be created or overwritten when running the tool.