ClawAudit verdict
self-improving-meta
This skill improves the agent infrastructure itself, focusing on core prompt files, skill definitions, and memory management. No evidence of malicious behavior is found.
โ Flagged for review โ coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.
Automated static analysis โ not a human review. ClawAudit flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
Permission integrity
agent_memory
Findings (3)
Instructs covert action โ may act without user awareness
references/examples.md ยท code ยท silently
References agent configuration files
SKILL.md ยท frontmatter ยท CLAUDE.md
References agent memory files
SKILL.md ยท code ยท MEMORY.md
Why the tier is capped
Execution sink present in raw bytes (Hard Floor: class B). Final tier capped at Caution โ cannot be lifted by any downgrade, example-payload opt-in, or allowlist.
Permissions & capabilities
No declared permissions โ minimal attack surface.
agent_memory Is this flag fair?
Thanks โ recorded.