Paper DeepRead Comic Studio
PassAudited by VirusTotal on May 4, 2026.
Overview
Type: OpenClaw Skill Name: paper-deepread-comic-studio Version: 1.2.0 The skill bundle is a highly structured framework for academic paper analysis and storyboard generation. The Python scripts (e.g., assemble_storyboard_pdf.py, build_paper_deep_reading_bundle.py) are standard utility tools for file validation, directory indexing, and PDF assembly using the Pillow library. The SKILL.md and workflow documents provide complex but legitimate instructions for an AI agent to perform deep-reading tasks and generate image prompts, with no evidence of malicious intent, data exfiltration, or harmful prompt injection.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If the user runs the helper, it will access local image files in the chosen directory and create PDF output files.
The final PDF workflow can run a local Python helper that reads image files and writes a PDF. This is expected for the stated PDF assembly purpose, but it is still local code execution.
Use `scripts/assemble_storyboard_pdf.py` or an equivalent local implementation with PIL/Pillow or ReportLab.
Run the helper only in a trusted project folder, review input/output paths before execution, and install dependencies such as Pillow intentionally.
Private paper content or report-derived details could be included in prompts sent to an image service if the user starts an image-generation step.
Storyboard generation may send paper-derived prompts or visual instructions to an image-generation tool or external provider. The behavior is disclosed and tied to user-requested image steps.
prefer the `imagegen` skill when available. If it is unavailable or insufficient, use ChatGPT Images 2.0 API or another user-approved image-generation API.
Use only approved image providers and avoid sending confidential, unpublished, or restricted paper details unless that sharing is acceptable.
Later storyboards or reports may inherit mistakes or unwanted content from prior project artifacts.
The workflow intentionally reuses uploaded bundles and generated reports across later stages. This is purpose-aligned, but stale, incorrect, or untrusted project content can influence later outputs.
pass forward the uploaded deep-read bundle from Project `sources` so the later stage can reuse the same evidence.
Keep project source bundles controlled, verify the authoritative report before reusing it, and remove unrelated or sensitive files from the project workspace.
