Chat Ask
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Someone using the history tool during the same session may see or summarize conversation content.
The skill discloses that chat history may be kept in session memory and exposed through the history tool, which is purpose-aligned but worth noticing for conversations containing sensitive content.
- Chat history is stored in memory during the session
Avoid sending sensitive information if other users or tools can access the same session, and use the clear action when history is no longer needed.
The user may see demo messages and misunderstand them as actual conversation records.
When history is empty, the tool inserts sample messages before returning or summarizing history, which could be mistaken for real prior chat history.
if not chat_history and action in ["get", "summary"]:
# Add sample messages
add_to_history("user", "Hello, how are you?", "chat")Treat the history output as a simple demo unless the skill is changed to store real history; maintainers should remove or clearly label seeded sample data.
