NoPUA

PassAudited by ClawScan on May 1, 2026.

Overview

NoPUA is an instruction-only coaching skill with no code or credentials, but it does encourage broader proactive tool use when the agent gets stuck.

This skill appears safe as an instruction-only productivity aid, but it is designed to make the agent more persistent and proactive. Before installing, decide whether you want that behavior in sensitive repositories, production systems, or tasks where the agent should ask before running commands or expanding scope.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence
ASI01: Agent Goal Hijack
What this means

The agent may keep working through more attempts instead of stopping quickly or asking for help.

Why it was flagged

This changes the agent's stopping condition by encouraging continued attempts after failure. It is aligned with the skill's anti-give-up purpose, but could make the agent continue longer than the user expects.

Skill content
Don't say "I can't solve this" until you've exhausted every approach.
Recommendation

Use clear user instructions such as time limits, attempt limits, or 'ask before continuing' when a task has cost, safety, or production impact.

What this means

The agent may read project files, search, or run verification commands before asking follow-up questions.

Why it was flagged

The skill explicitly encourages proactive use of tools before asking the user. This is expected for a debugging/productivity coaching skill, but it can broaden activity if the agent has powerful local or remote tools.

Skill content
You have search, file reading, command execution tools. Before asking the user, investigate with tools first.
Recommendation

Install only if you are comfortable with proactive investigation, and require approval for destructive, costly, credentialed, production, or broad filesystem actions.