Skylv Auto Repair Agent

ReviewAudited by ClawScan on May 10, 2026.

Overview

This appears to be a coherent local error-diagnosis helper, but it can run user-supplied shell commands and stores learned repair patterns locally.

This skill looks purpose-aligned for local debugging and repair suggestions. Before installing or invoking it, review the full JavaScript file, verify Node.js is available, and only let it run commands you have explicitly checked. Avoid teaching it patterns that contain secrets or unsafe repair steps.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the agent or user supplies a destructive or untrusted command, it could modify files or affect the local environment.

Why it was flagged

The engine directly executes a supplied command in a shell. This is disclosed by the watch-mode documentation and fits the purpose, but it is broad local command authority.

Skill content
const out = execSync(command, { encoding: 'utf8', timeout: 60000 });
Recommendation

Only use watch mode with commands you have reviewed. The skill should display the exact command and require user approval before execution, especially for file-changing operations.

What this means

Learned patterns can influence future repair suggestions, and any sensitive text included in learned errors or fixes may remain in the local pattern file.

Why it was flagged

The skill saves user-learned error/fix patterns locally and reloads them for future analyses.

Skill content
const PATTERNS_FILE = '.self-heal-patterns.json'; ... fs.writeFileSync(PATTERNS_FILE, JSON.stringify(custom, null, 2));
Recommendation

Review learned patterns periodically and avoid saving passwords, tokens, private logs, or unsafe fix instructions.

What this means

Installation checks may not warn that Node.js is needed, and users may have to resolve the runtime dependency themselves.

Why it was flagged

The usage examples require a Node.js runtime, while the provided registry metadata declares no required binaries and no install spec.

Skill content
node self_healing_engine.js analyze "PowerShell AmpersandNotAllowed &"
Recommendation

Verify Node.js is installed and inspect the local JavaScript file before running it, especially because the skill source is listed as unknown.