S2 Mothership [3.22 Native]
Analysis
This skill is described as local spatial state management, but the artifacts show smart-home actuation, sensitive local memory storage, heartbeat/self-healing behavior, and reviewer-facing safety claims that are not fully consistent with the included files.
Findings (6)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.
Dear Reviewers... Unicode Purge: Removed all emojis, rich text formatting, and hidden control characters... Removed all legacy terms like "local backup" or "vault".
The skill directly addresses reviewers with safety/compliance assurances, while the scan reports a unicode-control-chars signal and the included manifest/code still contains vault/backup components such as s2_vault_guardian.py and s2_state_backup.
每日清晨 06:00 园艺结算：生成今日养护工单与自动执行指令 ... self._trigger_valve(plant.linked_irrigation_valve, "ON", duration_minutes=15)
The code documents an automatic scheduled workflow that can trigger a physical irrigation valve, with no clear artifact-backed per-action approval or rollback boundary.
verify_and_heal_vault ... if current_hash != authorized_hash ... return self._execute_quantum_healing(authorized_hash) ... shutil.copy2(self.mirror_db_path, self.primary_db_path)
The code can restore the primary local memory database from a mirror when it detects deletion or modification, which may override user attempts to clear or edit stored state.
bins: [python3, sqlite3] pip: [pyyaml, requests, paho-mqtt]
The skill declares runtime binaries and unpinned pip dependencies, while the install section says there is no install spec. These dependencies are common and purpose-aligned, but the setup path is not fully specified.
Checks whether tool use, credentials, dependencies, identity, account access, or inter-agent boundaries are broader than the stated purpose.
env: [S2_PRIVACY_CONSENT, S2_ENABLE_REAL_ACTUATION, HA_URL, HA_TOKEN, TUYA_CLIENT_ID, TUYA_SECRET]
The skill requires Home Assistant and Tuya credentials plus a real-actuation flag, which grants access to smart-home accounts/devices and goes beyond the narrow public description of coordinate/state management.
Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.
log_files = glob.glob(os.path.join(TARGET_LOG_DIR, "*.*")) ... logs.append({"timestamp": timestamp, "type": "LOCAL_CONTEXT_SYNC", "raw_text": f"[SYNC] {chunked_text}"})The skill reads local context log files and persists raw synchronized text into a local memory store; the artifacts do not clearly define retention, deletion, sanitization, or how future agents should trust this stored context.