Voice Memo

PendingStatic analysis audit pending.

Overview

No static analysis result has been recorded yet. Pattern checks will appear here once the artifact has been analyzed.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ConcernMedium Confidence
ASI10: Rogue Agents
What this means

The agent could create recurring threads or reminders beyond a single user request, potentially in an unintended chat or workspace.

Why it was flagged

This instructs recurring autonomous activity: creating a daily thread and sending nightly reminders. The artifact does not specify user opt-in, destination, scheduling mechanism, or how to disable it.

Skill content
毎朝8時にボイスメモスレッドを作成... 毎晩21時にメモ未記録なら リマインダーを送信。
Recommendation

Require explicit user setup for any schedule, clearly name the destination, provide a disable command, and ask for confirmation before sending recurring messages.

What this means

The skill may not work as packaged, or it may depend on local code outside the reviewed artifacts.

Why it was flagged

The core workflow depends on a local script, but the supplied file manifest contains only SKILL.md and no script implementation, so reviewers cannot see where memo data is stored or what the script does.

Skill content
"requires": { "scripts": ["scripts/voice_memo.js"] } ... node scripts/voice_memo.js add
Recommendation

Include the referenced script in the skill package or update the documentation to explain the external dependency and its provenance.

What this means

Voice memos may contain sensitive personal or business information that will be saved for search and listing.

Why it was flagged

The skill is designed to store transcribed voice memo text and derived summaries, decisions, topics, and action items for later retrieval.

Skill content
文字起こしテキストの保存、要約・キーワード抽出、検索
Recommendation

Tell users where memo data is stored, how long it is retained, how to delete it, and whether stored content is reused across future tasks.