Deep modules for agent-native codebases

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent code-refactoring skill that may inspect and change repository files and run test/lint commands, but the provided artifacts do not show hidden data collection, credentials, network calls, or destructive behavior.

This skill appears safe for its intended use, but treat it like any code-refactoring assistant: use a branch, review proposed file moves/deletes, approve commands before execution, and inspect generated scaffold files before committing.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Running project commands may execute local scripts, consume resources, or trigger project-specific side effects.

Why it was flagged

The skill directs the agent toward project test, lint, typecheck, and build-style commands. That is expected for safe refactoring, but these commands can execute repository-defined code.

Skill content
Identify the quickest command that provides signal: ... `npm test`, `pytest -q`, `go test ./...` ... `eslint .`, `ruff check`
Recommendation

Review and approve verification commands before running them, especially in unfamiliar repositories or where scripts may install dependencies, contact services, or mutate data.

What this means

If run with unintended arguments, the helper could create files in an unintended location, though it avoids clobbering existing files.

Why it was flagged

The optional helper writes scaffold files under user-specified root/base/module paths. This is aligned with the scaffolding purpose, but users should confirm the target path before use.

Skill content
parser.add_argument("--base-dir", default="src" ...); parser.add_argument("--root", default="." ...); ... module_dir = base_dir / args.name ... path.write_text(content, encoding="utf-8")
Recommendation

Run the scaffold script only from the intended repository or with explicit reviewed arguments, and check the resulting diff before committing.

NoteHigh Confidence
ASI08: Cascading Failures
What this means

A broad refactor could break imports, tests, build scripts, or deployment assumptions if applied too quickly.

Why it was flagged

The skill is designed to plan repository restructuring, including moves and deletes. This is purpose-aligned, but architectural refactors can affect many files and downstream workflows.

Skill content
## 6. Filesystem changes (move plan)
- Create:
- Move:
- Delete:
- Temporary shims:
Recommendation

Use version control, apply changes incrementally, run the feedback loop after each step, and keep a rollback plan.