Interview Synthesis

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This is an instruction-only research synthesis skill, but it may process private participant data and include verbatim quotes in the final report.

This skill appears safe to install as an instruction-only analysis aid. Before using it, remove unnecessary PII and confidential details from transcripts, and review the final report’s verbatim quotes before sharing with stakeholders.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Participant or customer details could enter the agent conversation and appear in excerpts if the user provides unredacted source material.

Why it was flagged

The skill is designed to process raw qualitative research data, which may include PII or confidential participant statements, and may reuse verbatim quotes in the report. This is purpose-aligned but privacy-sensitive.

Skill content
Ask the user to paste the transcripts, session notes, or open-ended responses... If the data contains participant names or personally identifying information (PII)... refer to participants as P1, P2, etc... The quote must be verbatim from the transcript or notes
Recommendation

Redact participant names, contact details, company-confidential facts, and unnecessary sensitive content before pasting data; review all selected quotes before sharing the report.

What this means

A user might over-trust the privacy claim and share a report that still contains sensitive details inside verbatim quotes.

Why it was flagged

The privacy statement is stronger than the workflow instructions: the skill requires verbatim supporting quotes, which could include sensitive content unless the user or agent redacts it.

Skill content
README: "Sensitive data is never reproduced verbatim in the final report." SKILL: "The quote must be verbatim from the transcript or notes"
Recommendation

Treat the privacy claim as a goal rather than a guarantee; manually check and redact final quotes before distribution.