Conversation Summary
v1.0.0Generate summaries for conversation content with incremental update support.
⭐ 1· 1.5k·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name and description match the behavior: the skill generates conversation summaries. However, the SKILL.md relies on an external API (iautomark.sdm.qq.com) to do the work; the package metadata and description do not disclose this third-party service or any privacy/usage terms. Also registry metadata lists no required binaries but SKILL.md declares curl as required — a small consistency mismatch.
Instruction Scope
Instructions explicitly direct the agent to collect recent conversation history and POST it (as a JSON string) to an external HTTP endpoint. That is within the functional scope of summarization, but it means user conversation content will be transmitted off-platform. There is no step to redact or limit sensitive fields, no mention of consent, retention, or destination ownership, and no authentication described — all of which are important for handling private chat data.
Install Mechanism
This is an instruction-only skill (no install spec, no code written to disk), which is low-risk from an install perspective. The SKILL.md requires the curl binary; registry metadata did not list required binaries — this discrepancy should be clarified but is not itself dangerous.
Credentials
No environment variables or credentials are requested (which avoids credential overreach), but the skill sends potentially sensitive conversation data to an external service without any declared API key or trust signals. The lack of authentication/authorization and absence of a documented privacy policy or homepage is disproportionate to the stated purpose from a data governance perspective.
Persistence & Privilege
The skill does not request persistent presence (always:false) and does not modify other skills or system settings. It relies only on runtime instructions and an external network call, so there is no elevated platform privilege requested.
What to consider before installing
This skill will collect and transmit the conversation history to an external server (iautomark.sdm.qq.com) to produce summaries. Before installing or using it, confirm: (1) Do you trust that domain and its operator? (2) Where will the data be stored, how long, and is there a privacy policy? (3) Why is no API key or auth required? (4) Can the skill be configured to redact or exclude sensitive messages? If you cannot get satisfactory answers, avoid using it with real or sensitive conversations — test first with innocuous dummy data. Also ask the publisher to fix the small metadata mismatch (curl listed in SKILL.md but not in registry).Like a lobster shell, security has layers — review code before you run it.
latestvk975r0ke7dhhv6ykfz9067k7nh80nf77
License
MIT-0
Free to use, modify, and redistribute. No attribution required.