ClawAudit verdict
woop-daily
Accesses agent memory AND writes files
The skill appears to be a daily WOOP exercise guide, and it does not exhibit any malicious behavior.
Automated static analysis โ not a human review. ClawAudit flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
What it does
These are capability combinations: each listed behavior occurs in the skill, but ClawAudit detects co-occurrence โ it does not verify that one flows into another. Read the code to confirm a live chain.
Accesses agent memory AND writes files โ may modify agent behavior persistently
LLM01 ยท LLM06 ยท ASI01 ยท ASI06
Permission integrity
file_read+write
agent_memory
Findings (1)
Long base64 string (100+ chars) โ likely obfuscated payload
README.md ยท prose ยท downgraded ยท PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHZpZXdCb3g9IjAgMCAyNCAyNCI+
Permissions & capabilities
No declared permissions โ minimal attack surface.
agent_memoryfile_write Thanks โ recorded.