Outline

ReviewAudited by ClawScan on May 10, 2026.

Overview

This skill is advertised as a document-outline generator, but the provided artifacts implement a local task/idea logging tool that persists user-entered text.

Review this carefully before installing: the artifacts do not show network access or credential use, but they do show a local logging tool rather than a true document-outline generator. Install it only if you want local task/idea logging, and avoid entering sensitive information unless you are comfortable with it being stored under `~/.local/share/outline`.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A user may install or invoke this expecting outline generation, while the skill instead records notes, tasks, plans, reminders, and history locally.

Why it was flagged

The artifact advertises document outline generation but then describes a different productivity logging tool, creating a concrete purpose/capability mismatch.

Skill content
description: "Generate document outlines with TOC, chapter planning, and hierarchy management..." ... "A productivity toolkit for capturing, planning, tracking, and reviewing tasks and ideas."
Recommendation

Clarify the registry/SKILL description or change the implementation so the advertised outline-generation behavior matches what the tool actually does.

What this means

Private plans, reminders, or document content entered into the tool can remain on disk and later be searched or exported.

Why it was flagged

The script creates persistent local storage and records user-provided text and command history into log files.

Skill content
DATA_DIR="${HOME}/.local/share/outline"
mkdir -p "$DATA_DIR"
...
echo "$ts|$input" >> "$DATA_DIR/add.log"
...
_log "add" "$input"
Recommendation

Avoid entering secrets or sensitive personal data unless you are comfortable storing it locally; the skill should document retention and cleanup steps clearly.

What this means

Users may need to verify how the shell script is installed or invoked, because the install mechanism is not explicit in the supplied artifacts.

Why it was flagged

The metadata characterizes the skill as instruction-only while also shipping a shell script that the documentation expects to be available as an `outline` command.

Skill content
Install specifications: No install spec — this is an instruction-only skill. Code file presence: 1 code file(s): scripts/script.sh
Recommendation

Provide a clear install specification or document that the script is optional/manual, including its expected path and permissions.