Outline
PassAudited by VirusTotal on May 11, 2026.
Overview
Type: OpenClaw Skill Name: outline Version: 2.0.1 The 'outline' skill is a local productivity and activity logging tool that manages timestamped entries in flat files within the user's local data directory (~/.local/share/outline/). The implementation in 'scripts/script.sh' uses standard POSIX utilities for file appending, searching, and basic statistics, with no evidence of network access, data exfiltration, or command injection vulnerabilities. All functionality aligns with the documentation provided in 'SKILL.md'.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A user may install or invoke this expecting outline generation, while the skill instead records notes, tasks, plans, reminders, and history locally.
The artifact advertises document outline generation but then describes a different productivity logging tool, creating a concrete purpose/capability mismatch.
description: "Generate document outlines with TOC, chapter planning, and hierarchy management..." ... "A productivity toolkit for capturing, planning, tracking, and reviewing tasks and ideas."
Clarify the registry/SKILL description or change the implementation so the advertised outline-generation behavior matches what the tool actually does.
Private plans, reminders, or document content entered into the tool can remain on disk and later be searched or exported.
The script creates persistent local storage and records user-provided text and command history into log files.
DATA_DIR="${HOME}/.local/share/outline"
mkdir -p "$DATA_DIR"
...
echo "$ts|$input" >> "$DATA_DIR/add.log"
...
_log "add" "$input"Avoid entering secrets or sensitive personal data unless you are comfortable storing it locally; the skill should document retention and cleanup steps clearly.
Users may need to verify how the shell script is installed or invoked, because the install mechanism is not explicit in the supplied artifacts.
The metadata characterizes the skill as instruction-only while also shipping a shell script that the documentation expects to be available as an `outline` command.
Install specifications: No install spec — this is an instruction-only skill. Code file presence: 1 code file(s): scripts/script.sh
Provide a clear install specification or document that the script is optional/manual, including its expected path and permissions.