Paper Card Analyzer

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This instruction-only skill coherently reads parsed paper files and writes clearly named paper-card outputs, with the main caution that it may overwrite its own output files during revisions.

This skill appears safe for normal use after running paper-parse. Confirm the target paper files when prompted, and be aware that it saves and may overwrite paper-card.md, paper-card.json, and paper-card-feedback.md in the selected folder.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Using the skill can replace existing paper-card output files for the selected paper folder.

Why it was flagged

The skill instructs the agent to create and overwrite fixed output files in the same folder as the parsed paper files.

Skill content
"Always save:\n\n- `paper-card.md`\n- `paper-card.json`\n- `paper-card-feedback.md`" ... "Update card and save again (overwrite current files)."
Recommendation

Use it in the intended paper-parse output folder and keep backups if existing paper-card files should not be overwritten.

What this means

Comments provided during revisions may be saved alongside the paper-card files.

Why it was flagged

The skill stores user feedback and revision history in a persistent local file.

Skill content
"`paper-card-feedback.md` (feedback log and revision history)" and "Append each round to `paper-card-feedback.md` with: round number, user request, key edits."
Recommendation

Avoid putting sensitive comments in revision feedback unless you are comfortable with them being retained in the local feedback log.