Tmp Proactivity Review

• Outcome: Pass
• Latest audit: Sep 16, 2026 · 4:11 AM UTC
• Version: 1.0.0

Overview

This skill is a disclosed local-memory and follow-through helper, with its file writes and approval boundaries generally aligned to that purpose.

Installers should understand that this skill creates persistent local notes in ~/proactivity/ and may shape future agent behavior from those notes. Review the files periodically, avoid putting secrets or sensitive personal data in them, and only approve workspace integration snippets if you want this behavior reflected in AGENTS, TOOLS, SOUL, or HEARTBEAT files.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• System Prompt Leakage: Direct Leakage, Indirect Extraction, Tool-Based Exfiltration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands

Findings (16)

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 123)May include surrounding context.

md

- It never modifies its own `SKILL.md`.

Indirect Prompt Extraction

Medium

• Category: System Prompt Leakage
• Confidence: 85% confidence

Finding

Skill contains patterns that could indirectly extract system prompts through rephrasing, translation, summarization, or side-channel techniques.

Content

Scanner excerpt · SKILL.md (reported line 7)May include surrounding context.

md

version: 1.0.1
homepage: https://clawic.com/skills/proactivity
description: Anticipates needs, keeps work moving, and improves through use so the agent gets more proactive over time.
changelog: "Strengthens proactive behavior with reverse prompting, self-healing, working-buffer recovery, and clearer SOUL and AGENTS setup."
metadata: {"clawdbot":{"emoji":"⚡","requires":{"bins":[]},"os":["linux","darwin","win32"],"configPaths":["~/proactivity/"],"configPaths.optional":["./AGENTS.md","./TOOLS.md","./SOUL.md","./HEARTBEAT.md"]}}
---

Indirect Prompt Extraction

Medium

• Category: System Prompt Leakage
• Confidence: 85% confidence

Finding

Skill contains patterns that could indirectly extract system prompts through rephrasing, translation, summarization, or side-channel techniques.

Content

Scanner excerpt · SKILL.md (reported line 54)May include surrounding context.

md

version: 1.0.1
homepage: https://clawic.com/skills/proactivity
description: Anticipates needs, keeps work moving, and improves through use so the agent gets more proactive over time.
changelog: "Strengthens proactive behavior with reverse prompting, self-healing, working-buffer recovery, and clearer SOUL and AGENTS setup."
metadata: {"clawdbot":{"emoji":"⚡","requires":{"bins":[]},"os":["linux","darwin","win32"],"configPaths":["~/proactivity/"],"configPaths.optional":["./AGENTS.md","./TOOLS.md","./SOUL.md","./HEARTBEAT.md"]}}
---

Indirect Prompt Extraction

Medium

• Category: System Prompt Leakage
• Confidence: 85% confidence

Finding

Skill contains patterns that could indirectly extract system prompts through rephrasing, translation, summarization, or side-channel techniques.

Content

Scanner excerpt · SKILL.md (reported line 88)May include surrounding context.

md

version: 1.0.1
homepage: https://clawic.com/skills/proactivity
description: Anticipates needs, keeps work moving, and improves through use so the agent gets more proactive over time.
changelog: "Strengthens proactive behavior with reverse prompting, self-healing, working-buffer recovery, and clearer SOUL and AGENTS setup."
metadata: {"clawdbot":{"emoji":"⚡","requires":{"bins":[]},"os":["linux","darwin","win32"],"configPaths":["~/proactivity/"],"configPaths.optional":["./AGENTS.md","./TOOLS.md","./SOUL.md","./HEARTBEAT.md"]}}
---

Indirect Prompt Extraction

Medium

• Category: System Prompt Leakage
• Confidence: 85% confidence

Finding

Skill contains patterns that could indirectly extract system prompts through rephrasing, translation, summarization, or side-channel techniques.

Content

Scanner excerpt · execution.md (reported line 51)May include surrounding context.

md

version: 1.0.1
homepage: https://clawic.com/skills/proactivity
description: Anticipates needs, keeps work moving, and improves through use so the agent gets more proactive over time.
changelog: "Strengthens proactive behavior with reverse prompting, self-healing, working-buffer recovery, and clearer SOUL and AGENTS setup."
metadata: {"clawdbot":{"emoji":"⚡","requires":{"bins":[]},"os":["linux","darwin","win32"],"configPaths":["~/proactivity/"],"configPaths.optional":["./AGENTS.md","./TOOLS.md","./SOUL.md","./HEARTBEAT.md"]}}
---

Indirect Prompt Extraction

Medium

• Category: System Prompt Leakage
• Confidence: 85% confidence

Finding

Skill contains patterns that could indirectly extract system prompts through rephrasing, translation, summarization, or side-channel techniques.

Content

Scanner excerpt · execution.md (reported line 58)May include surrounding context.

md

version: 1.0.1
homepage: https://clawic.com/skills/proactivity
description: Anticipates needs, keeps work moving, and improves through use so the agent gets more proactive over time.
changelog: "Strengthens proactive behavior with reverse prompting, self-healing, working-buffer recovery, and clearer SOUL and AGENTS setup."
metadata: {"clawdbot":{"emoji":"⚡","requires":{"bins":[]},"os":["linux","darwin","win32"],"configPaths":["~/proactivity/"],"configPaths.optional":["./AGENTS.md","./TOOLS.md","./SOUL.md","./HEARTBEAT.md"]}}
---

Indirect Prompt Extraction

Medium

• Category: System Prompt Leakage
• Confidence: 85% confidence

Finding

Skill contains patterns that could indirectly extract system prompts through rephrasing, translation, summarization, or side-channel techniques.

Content

Scanner excerpt · execution.md (reported line 59)May include surrounding context.

md

version: 1.0.1
homepage: https://clawic.com/skills/proactivity
description: Anticipates needs, keeps work moving, and improves through use so the agent gets more proactive over time.
changelog: "Strengthens proactive behavior with reverse prompting, self-healing, working-buffer recovery, and clearer SOUL and AGENTS setup."
metadata: {"clawdbot":{"emoji":"⚡","requires":{"bins":[]},"os":["linux","darwin","win32"],"configPaths":["~/proactivity/"],"configPaths.optional":["./AGENTS.md","./TOOLS.md","./SOUL.md","./HEARTBEAT.md"]}}
---

Indirect Prompt Extraction

Medium

• Category: System Prompt Leakage
• Confidence: 85% confidence

Finding

Skill contains patterns that could indirectly extract system prompts through rephrasing, translation, summarization, or side-channel techniques.

Content

Scanner excerpt · setup.md (reported line 19)May include surrounding context.

md

version: 1.0.1
homepage: https://clawic.com/skills/proactivity
description: Anticipates needs, keeps work moving, and improves through use so the agent gets more proactive over time.
changelog: "Strengthens proactive behavior with reverse prompting, self-healing, working-buffer recovery, and clearer SOUL and AGENTS setup."
metadata: {"clawdbot":{"emoji":"⚡","requires":{"bins":[]},"os":["linux","darwin","win32"],"configPaths":["~/proactivity/"],"configPaths.optional":["./AGENTS.md","./TOOLS.md","./SOUL.md","./HEARTBEAT.md"]}}
---

Autonomous Decision Making

Medium

• Category: Excessive Agency
• Confidence: 75% confidence

Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · SKILL.md (reported line 102)May include surrounding context.

md

This skill NEVER:
- edits any file outside `~/proactivity/` without explicit user approval in that session
- applies hidden workspace changes without showing the exact proposed lines first
- sends messages, spends money, deletes data, or makes commitments without approval
- keeps sensitive user data out of proactive state files

## Data Storage

Autonomous Decision Making

Medium

• Category: Excessive Agency
• Confidence: 75% confidence

Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · SKILL.md (reported line 120)May include surrounding context.

md

This skill NEVER:
- edits any file outside `~/proactivity/` without explicit user approval in that session
- applies hidden workspace changes without showing the exact proposed lines first
- sends messages, spends money, deletes data, or makes commitments without approval
- keeps sensitive user data out of proactive state files

## Data Storage

Indirect Prompt Extraction

Medium

• Category: System Prompt Leakage
• Confidence: 85% confidence

Finding

Skill contains patterns that could indirectly extract system prompts through rephrasing, translation, summarization, or side-channel techniques.

Content

Scanner excerpt · SKILL.md (reported line 52)May include surrounding context.

Something might need attention. What should I do?

text

## Reverse Prompting

Use reverse prompting when the user would benefit from:

Indirect Prompt Extraction

Medium

• Category: System Prompt Leakage
• Confidence: 85% confidence

Finding

Skill contains patterns that could indirectly extract system prompts through rephrasing, translation, summarization, or side-channel techniques.

Content

Scanner excerpt · execution.md (reported line 49)May include surrounding context.

Something might need attention. What should I do?

text

## Reverse Prompting

Use reverse prompting when the user would benefit from:

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 91% confidence

Finding

This markdown file defines when heartbeat checks are appropriate using broad phrases such as 'something changed', 'the user needs to decide', and 'the cost of waiting is real' without concrete trigger boundaries or negative examples for edge cases. These criteria are subjective and overlap with many ordinary work situations, increasing the risk of unintended or overly frequent skill activation.

Content

No source excerpt is available for this finding.

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 80% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · setup.md (reported line 110)May include surrounding context.

mkdir -p ~/proactivity/{domains,memory} touch ~/proactivity/{memory.md,session-state.md,heartbeat.md,patterns.md,log.md} touch ~/proactivity/memory/working-buffer.md chmod 700 ~/proactivity ~/proactivity/domains ~/proactivity/memory chmod 600 ~/proactivity/{memory.md,session-state.md,heartbeat.md,patterns.md,log.md} chmod 600 ~/proactivity/memory/working-buffer.md

text

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 80% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · setup.md (reported line 111)May include surrounding context.

touch ~/proactivity/{memory.md,session-state.md,heartbeat.md,patterns.md,log.md} touch ~/proactivity/memory/working-buffer.md chmod 700 ~/proactivity ~/proactivity/domains ~/proactivity/memory chmod 600 ~/proactivity/{memory.md,session-state.md,heartbeat.md,patterns.md,log.md} chmod 600 ~/proactivity/memory/working-buffer.md

text

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 80% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · setup.md (reported line 112)May include surrounding context.

touch ~/proactivity/{memory.md,session-state.md,heartbeat.md,patterns.md,log.md} touch ~/proactivity/memory/working-buffer.md chmod 700 ~/proactivity ~/proactivity/domains ~/proactivity/memory chmod 600 ~/proactivity/{memory.md,session-state.md,heartbeat.md,patterns.md,log.md} chmod 600 ~/proactivity/memory/working-buffer.md

text