Screenshot To Task

Security checks across malware telemetry and agentic risk

Overview

The artifacts show a local, review-oriented screenshot-to-task formatter; users should mainly watch the package provenance, chosen file paths, and any sensitive screenshot content.

This appears safe for organizing screenshot summaries into reviewable tasks. Before installing, make sure you trust the package source, provide only the files or text you intend to process, redact sensitive screenshot content, and review the generated task list before copying it into external tools.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI04: Agentic Supply Chain Vulnerabilities
Info
What this means

It may be harder to independently verify the publisher or update source before installing.

Why it was flagged

The package provenance is limited by the unknown source and placeholder-style homepage, although the artifacts do not show a remote installer or hidden dependency.

Skill content
Source: unknown; Homepage: https://example.invalid/skills/screenshot-to-task
Recommendation

Install only from a trusted registry/package source, review the included files, and pin the version if you adopt it.

#
ASI02: Tool Misuse and Exploitation
Low
What this means

If pointed at an unintended private file or shared output location, the generated task list could include sensitive content or be saved somewhere inappropriate.

Why it was flagged

The optional helper accepts local input and output paths. That is expected for this local formatting workflow, but the selected paths determine what local content is read and where output is written.

Skill content
parser.add_argument("--input", required=True, help="Input file, directory, or inline string.") ... parser.add_argument("--output", help="Write output to a file instead of stdout.")
Recommendation

Use explicit scratch files or stdout for output, avoid broad/private paths, and review generated Markdown before using it elsewhere.

#
ASI06: Memory and Context Poisoning
Info
What this means

Private details from screenshots can be carried into the generated notes or any saved output file.

Why it was flagged

The documentation acknowledges that screenshot-derived inputs may contain personal or sensitive material, and the skill’s purpose is to summarize that material into tasks and notes.

Skill content
若输入含个人信息或敏感材料,建议先脱敏再处理。
Recommendation

Redact sensitive screenshot text before processing and store generated outputs only in appropriate locations.