meowtest

Captures learnings, errors, and corrections to enable continuous improvement. Use when: (1) A command or operation fails unexpectedly, (2) User corrects Clau...

This skill is mostly coherent with its described goal (logging learnings and providing lightweight hooks), but take these precautions before installing or enabling it: - Verify the package identity: confirm why the registry name/slug/owner differ from the SKILL.md and _meta.json (could be a renamed or repackaged copy). Prefer code from an authoritative repo you trust. - Inspect the scripts and hook code yourself (they're small). Look for any network calls or file writes to unexpected locations (I found none beyond creating files under the workspace or skills directories and pushing a virtual bootstrap file). - Be cautious enabling PostToolUse hooks globally or at user-level. The error-detector reads CLAUDE_TOOL_OUTPUT which can contain sensitive command output; enable only in trusted projects or use matcher filters to limit triggers. - Do not enable hooks system-wide (in your home-level settings) unless you trust the code and repository; prefer project-level config or set strict matcher filters. - Check file permissions (chmod +x where needed) and run the extract-skill scripts in --dry-run mode first to confirm behavior. - If you plan to run the suggested git clone, review that remote repo on GitHub before executing any install commands. If you want, I can list the exact lines that create or read files, or highlight the specific places where the hook reads CLAUDE_TOOL_OUTPUT and injects bootstrap files so you can audit them quickly.

Type: OpenClaw Skill Name: meowceshi Version: 1.0.2 The skill bundle provides a framework for an AI agent to log errors, corrections, and learnings into local markdown files for 'self-improvement.' It includes shell scripts (activator.sh, error-detector.sh, extract-skill.sh) and OpenClaw hooks (handler.js/ts) to automate reminders and file management. The logic is consistent with the stated purpose, and the documentation in SKILL.md includes explicit warnings against logging secrets or sensitive data. The scripts include basic security checks, such as path traversal prevention in extract-skill.sh, and no evidence of data exfiltration or unauthorized remote access was found.