10x Patterns

PassAudited by ClawScan on May 1, 2026.

Overview

This is an instruction-only development-practices skill with no evident code, credentials, or data access, though its user-run install examples rely on external package/repo trust and optional global installation.

This skill appears safe as development-process guidance. Before installing, verify that you trust the registry or GitHub source, and choose per-project installation if you do not want the skill available globally.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Running the install command means trusting the referenced package/repository path used to place skill content into the local environment.

Why it was flagged

The README documents a user-run install command that depends on an external GitHub path and npx behavior. This is installation-related and disclosed, but users should verify the source before running it.

Skill content
npx add https://github.com/wpank/ai/tree/main/skills/meta/10x-patterns
Recommendation

Install only from a trusted source, prefer the registry command if appropriate, and inspect the skill files before using global installation.

What this means

If installed globally, the skill can be available in future projects or sessions until the user removes it.

Why it was flagged

The README includes optional global skill-copy instructions, including similar Claude Code global paths. This makes the skill persistently available to the agent environment, but it is disclosed and user-directed.

Skill content
cp -r ~/.ai-skills/skills/meta/10x-patterns ~/.cursor/skills/10x-patterns
Recommendation

Use per-project installation if you want the skill limited to one workspace; remove the copied global folder when no longer needed.