NoPUA

PassAudited by VirusTotal on May 11, 2026.

Overview

Type: OpenClaw Skill Name: nopua Version: 0.1.0 The 'nopua' skill is a behavioral framework designed to enhance AI agent persistence and thoroughness when encountering task failures. It provides structured cognitive strategies (e.g., 'Water Methodology', '7-Point Clarity Checklist') and philosophical guidance to encourage proactive tool use, systematic debugging, and rigorous self-verification of results. The skill contains no evidence of malicious intent, data exfiltration, or unauthorized execution; its instructions (SKILL.md) are entirely focused on improving the agent's problem-solving methodology and autonomy within the user's stated goals.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence
ASI01: Agent Goal Hijack
What this means

The agent may keep working through more attempts instead of stopping quickly or asking for help.

Why it was flagged

This changes the agent's stopping condition by encouraging continued attempts after failure. It is aligned with the skill's anti-give-up purpose, but could make the agent continue longer than the user expects.

Skill content
Don't say "I can't solve this" until you've exhausted every approach.
Recommendation

Use clear user instructions such as time limits, attempt limits, or 'ask before continuing' when a task has cost, safety, or production impact.

What this means

The agent may read project files, search, or run verification commands before asking follow-up questions.

Why it was flagged

The skill explicitly encourages proactive use of tools before asking the user. This is expected for a debugging/productivity coaching skill, but it can broaden activity if the agent has powerful local or remote tools.

Skill content
You have search, file reading, command execution tools. Before asking the user, investigate with tools first.
Recommendation

Install only if you are comfortable with proactive investigation, and require approval for destructive, costly, credentialed, production, or broad filesystem actions.