RAG Engineering

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If used on private or regulated documents, the resulting RAG system may store and later reuse sensitive text, metadata, summaries, or retrieved context.

Why it was flagged

The skill advises building RAG pipelines that store indexed document chunks and derived context, which is central to the stated purpose but can involve persistent sensitive content.

Skill content
Raw Documents → Extraction → Cleaning → Enrichment → Chunking → Embedding → Indexing
Recommendation

Before applying the guidance, define allowed document sources, retention rules, access controls, redaction requirements, and safeguards for untrusted retrieved content.