Customer Voice Synthesizer

PassAudited by ClawScan on May 1, 2026.

Overview

The skill is a coherent local customer-research summarizer; the main cautions are to sanitize customer data and control which files the optional script reads or writes.

Before installing or invoking it, make sure the customer feedback you provide has been redacted where needed, use only intended input files or folders, and review the generated Markdown before sharing it outside your team.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If raw customer records are supplied, private details could appear in the generated summaries unless the user removes or masks them first.

Why it was flagged

The skill is intended to process raw customer conversations and feedback, which may contain personal or sensitive information; the artifact recognizes this and advises desensitization.

Skill content
输入通常包含:访谈摘录、评论、客服对话 ... 建议先做脱敏。
Recommendation

Sanitize or redact customer identifiers before use, and review the generated summary before sharing it.

What this means

The agent could read the specified local input and write a report file, so accidentally broad or sensitive paths could expose more material than intended.

Why it was flagged

The skill may use an optional local Python command that reads a user-selected input path and writes a user-selected output path; this is purpose-aligned but depends on safe path selection.

Skill content
python3 "{baseDir}/scripts/run.py" --input <输入文件> --output <输出文件>
Recommendation

Use narrowly scoped input files or directories, prefer `--dry-run` when unsure, and choose an output path that will not overwrite important files.