Chat Ask

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a simple local chat/ask skill with no evidence of credential use, network access, or destructive behavior, though its history feature is limited and may show demo entries.

This skill looks safe for simple local chat and Q&A use. Be aware that the history feature is basic, may include demo data rather than real history, and should not be relied on for auditing or long-term recordkeeping.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Someone using the history tool during the same session may see or summarize conversation content.

Why it was flagged

The skill discloses that chat history may be kept in session memory and exposed through the history tool, which is purpose-aligned but worth noticing for conversations containing sensitive content.

Skill content
- Chat history is stored in memory during the session
Recommendation

Avoid sending sensitive information if other users or tools can access the same session, and use the clear action when history is no longer needed.

What this means

The user may see demo messages and misunderstand them as actual conversation records.

Why it was flagged

When history is empty, the tool inserts sample messages before returning or summarizing history, which could be mistaken for real prior chat history.

Skill content
if not chat_history and action in ["get", "summary"]:
            # Add sample messages
            add_to_history("user", "Hello, how are you?", "chat")
Recommendation

Treat the history output as a simple demo unless the skill is changed to store real history; maintainers should remove or clearly label seeded sample data.