Wiki Compiler
Security checks across malware telemetry and agentic risk
Overview
This instruction-only skill is coherent for organizing a Tencent IMA knowledge base, but users should notice that it can use IMA API credentials and user-approved actions to read, move, and add knowledge-base content.
This skill appears appropriate if you want an agent to organize an IMA knowledge base. Before using it, confirm the target knowledge base, review the proposed folder structure and file moves, use scoped API credentials where possible, and inspect any web-sourced additions or generated guide notes before treating the compiled wiki as authoritative.
VirusTotal
65/65 vendors flagged this skill as clean.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If the API key is broad, the agent may be able to access or modify more IMA content than the user intended.
The skill uses Tencent IMA OpenAPI credentials to access provider APIs. This is aligned with its IMA knowledge-base purpose, but those credentials may grant account-level knowledge-base authority.
-H "ima-openapi-clientid: $IMA_OPENAPI_CLIENTID" \ -H "ima-openapi-apikey: $IMA_OPENAPI_APIKEY"
Use a dedicated, least-privileged IMA API key if available, and confirm which knowledge base the skill is allowed to work on.
Incorrect categorization or unintended moves could disrupt the user's existing knowledge-base structure.
The skill can create folders and move knowledge-base files. This is the core function of the wiki compiler and is preceded by confirmation gates, but it still changes the user's knowledge-base organization.
在目标知识库中创建文件夹结构（`create_folder`），然后将原始资料分类归入（`move_knowledge`）。
Review the proposed folder tree and file list before approving changes, and keep the requested change record for rollback.
Low-quality or incorrect web material could persist in the wiki and influence future answers or reports.
The skill may incorporate web-sourced and generated content into a persistent knowledge base. This is disclosed and purpose-aligned, but unreviewed external content could later be treated as trusted wiki knowledge.
如果用户资料不足，主动用 `search(source="web")` 补充关键资料，但需告知用户 ... 产出保存回知识库后，实现知识的"增量训练"
Ask the agent to list external sources, review generated guide notes, and approve additions before relying on the compiled wiki.