Aiseact

PassAudited by VirusTotal on May 11, 2026.

Overview

Type: OpenClaw Skill Name: aiseact Version: 1.1.0 The 'aiseact' skill bundle is a non-executable, documentation-based tool designed to guide an AI agent in performing high-quality web research. It contains no code (Python, Shell, or otherwise) and relies entirely on markdown instructions (SKILL.md, workflow.md) to implement a search methodology that prioritizes authoritative sources (e.g., .gov, .edu, and primary financial disclosures) while filtering out 'content farms.' The bundle includes extensive transparency and security documentation (SECURITY.md, TRUST.md) that explicitly outlines data handling and user override capabilities. There are no signs of malicious prompt injection, data exfiltration, or unauthorized execution.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ConcernHigh Confidence
ASI01: Agent Goal Hijack
What this means

The agent may apply AISEACT's source-ranking and filtering methodology to ordinary web searches even when you did not ask for it.

Why it was flagged

This registry description instructs the agent to apply the skill broadly and regardless of user initiation, which conflicts with the SKILL.md claim that use is optional and user-controlled.

Skill content
Description: AI Search Enhancement and Cross-verification Tool. ALWAYS USE when performing ANY web search, regardless of who initiated it - whether user explicitly asks,...
Recommendation

Remove the ALWAYS USE language from registry metadata and align invocation with explicit user requests or a clearly enabled opt-in mode; ensure skip/override commands are honored.

What this means

A user may believe the automatic-use problem was fixed when the registry description still encourages broad automatic use.

Why it was flagged

The provided registry metadata still contains 'ALWAYS USE' language, so this safety claim appears outdated or inaccurate.

Skill content
Risk 3: Metadata/Configuration Mismatch ... Fixed ✅ ... "ALWAYS USE" replaced with explicit user request patterns
Recommendation

Update SECURITY.md and registry metadata together so the documented safety posture matches the actual published skill metadata.

NoteHigh Confidence
ASI01: Agent Goal Hijack
What this means

Search results may be narrowed or weighted according to the skill's source-rating framework.

Why it was flagged

The skill intentionally instructs the agent to filter or avoid certain source categories. This is purpose-aligned for a search-quality skill, but it can affect which information the user sees.

Skill content
Phase 1: Broad - multiple keywords, filter P4 ... ## Avoid - Content farms: Baijiahao, Toutiao - Political propaganda: Guancha, Epoch Times - Biased: Breitbart, InfoWars
Recommendation

Use the documented overrides such as 'Skip AISEACT,' 'Include [source],' or 'Show all sources' when you want unfiltered or alternative-source results.

What this means

It is harder to verify that the published skill matches the maintainer's intended version.

Why it was flagged

The registry does not identify a source or homepage, even though SECURITY.md refers users to an 'official repository.' Because the skill is instruction-only with no install spec or code, this is a provenance note rather than a high-risk supply-chain concern.

Skill content
Source: unknown; Homepage: none
Recommendation

Before relying on it, review the installed files and confirm the publisher/source through a trusted channel.