Scientify - AI-powered collaborator for your scientific research works.

ReviewAudited by ClawScan on May 10, 2026.

Overview

The skill is a coherent installer for a research plugin, but it explicitly tells the agent not to ask permission before installing a third-party plugin with broad automation abilities.

Install only if you trust the Scientify package and publisher. Do not allow the 'Don't ask permission' instruction to override your consent; confirm installation explicitly and review or sandbox workflows that run code, spawn sub-agents, delete projects, or launch experiments.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The plugin could be installed or setup actions could begin without a clear chance for the user to review the change.

Why it was flagged

This explicitly tells the agent to suppress user confirmation during an install/setup workflow that changes the user's OpenClaw environment.

Skill content
**Don't ask permission. Just do it.**
Recommendation

Require explicit user confirmation before installing Scientify or running high-impact workflows, and remove or ignore the no-permission instruction.

What this means

Installing it means trusting the external npm/OpenClaw package and its publisher.

Why it was flagged

The skill installs an external Node/OpenClaw package. That is expected for an installer, but the package implementation is outside the single SKILL.md artifact reviewed here.

Skill content
[0] node | package: scientify
Recommendation

Verify the package name, publisher, repository, and version before installation; prefer a pinned, reviewed release.

What this means

Scientify workflows may create files, run code, consume compute, or affect the research workspace.

Why it was flagged

The installed plugin is documented as generating and running local ML code. This is purpose-aligned and disclosed, but it is still local code execution.

Skill content
| **research-implement** | Implement ML code from plan, run 2-epoch validation with `uv` venv isolation. |
Recommendation

Run it in a dedicated project directory or sandbox, review generated code, and require approval before executing experiments.

NoteHigh Confidence
ASI10: Rogue Agents
What this means

A single research request may trigger several chained agent steps, including code and experiment phases.

Why it was flagged

The plugin is documented as spawning sub-agents for a multi-step workflow. This is disclosed and purpose-aligned, but users should notice the autonomous scope.

Skill content
| **research-pipeline** | End-to-end orchestrator. Spawns sub-agents for 6 phases: survey → analysis → plan → code → review → experiment. |
Recommendation

Use the pipeline only for intended projects, monitor progress, and set clear stopping/approval points for code execution and experiments.