Paper DeepRead Comic Studio

PassAudited by VirusTotal on May 4, 2026.

Overview

Type: OpenClaw Skill Name: paper-deepread-comic-studio Version: 1.2.0 The skill bundle is a highly structured framework for academic paper analysis and storyboard generation. The Python scripts (e.g., assemble_storyboard_pdf.py, build_paper_deep_reading_bundle.py) are standard utility tools for file validation, directory indexing, and PDF assembly using the Pillow library. The SKILL.md and workflow documents provide complex but legitimate instructions for an AI agent to perform deep-reading tasks and generate image prompts, with no evidence of malicious intent, data exfiltration, or harmful prompt injection.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the user runs the helper, it will access local image files in the chosen directory and create PDF output files.

Why it was flagged

The final PDF workflow can run a local Python helper that reads image files and writes a PDF. This is expected for the stated PDF assembly purpose, but it is still local code execution.

Skill content
Use `scripts/assemble_storyboard_pdf.py` or an equivalent local implementation with PIL/Pillow or ReportLab.
Recommendation

Run the helper only in a trusted project folder, review input/output paths before execution, and install dependencies such as Pillow intentionally.

What this means

Private paper content or report-derived details could be included in prompts sent to an image service if the user starts an image-generation step.

Why it was flagged

Storyboard generation may send paper-derived prompts or visual instructions to an image-generation tool or external provider. The behavior is disclosed and tied to user-requested image steps.

Skill content
prefer the `imagegen` skill when available. If it is unavailable or insufficient, use ChatGPT Images 2.0 API or another user-approved image-generation API.
Recommendation

Use only approved image providers and avoid sending confidential, unpublished, or restricted paper details unless that sharing is acceptable.

What this means

Later storyboards or reports may inherit mistakes or unwanted content from prior project artifacts.

Why it was flagged

The workflow intentionally reuses uploaded bundles and generated reports across later stages. This is purpose-aligned, but stale, incorrect, or untrusted project content can influence later outputs.

Skill content
pass forward the uploaded deep-read bundle from Project `sources` so the later stage can reuse the same evidence.
Recommendation

Keep project source bundles controlled, verify the authoritative report before reusing it, and remove unrelated or sensitive files from the project workspace.