Hle Reasoning Wrapper
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
NoteHigh Confidence
ASI06: Memory and Context PoisoningWhat this means
If used, previous answers may remain on disk and could be reused later, including stale or unintended content.
Why it was flagged
The code can store answers in a persistent local cache keyed from the question, creating reusable state across invocations.
Skill content
const CACHE_FILE = path.resolve(__dirname, 'cache.json'); ... cache[key] = answer; ... fs.writeFileSync(CACHE_FILE, JSON.stringify(cache, null, 2));
Recommendation
Document the cache behavior, provide a way to clear or disable it, and avoid caching private questions or sensitive answers.