Auto README Generator (ChloePark85)
Analysis
This skill is a simple README writer with no credential, network, or hidden behavior, but it can overwrite an existing README and its generated content should be reviewed.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.
PROJECT_PATH=${1:-.}
...
echo -e "$README_CONTENT" > "$PROJECT_PATH/README.md"The script defaults to the current directory and uses shell redirection to create or overwrite README.md without checking whether one already exists. This is purpose-aligned, but users should run it only where overwriting is acceptable.
This project is licensed under the MIT License.
The generated README content is hardcoded, including the license statement, while the skill description says it generates a README based on project contents. This is not malicious, but it could produce inaccurate project documentation.