ClawAudit verdict
scienceclaw-status
The skill appears to be used for checking the status of a ScienceClaw agent, including journal stats, recent investigations, and activity summary, with no indication of malicious behavior.
โ Flagged for review โ coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.
Automated static analysis โ not a human review. ClawAudit flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
Permission integrity
file_read
Findings (2)
Python pathlib file read
SKILL.md ยท code ยท pathlib.Path.home()/'.scienceclaw'/'agent_profile.json'; print(json.loads(p.read
References agent memory files
SKILL.md ยท prose ยท downgraded ยท memory.md
Permissions & capabilities
Requires 1 system binary.
file_read Is this flag fair?
Thanks โ recorded.