Document Multiple Repository

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only skill is coherent and purpose-aligned, but it will read and summarize many files from the local repository root you choose.

Before installing or using it, make sure the ROOT_PATH contains only repositories you want analyzed, keep OUTPUT_PATH controlled, and review the generated docs for secrets or confidential infrastructure details before sharing them.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Generated documentation could unintentionally include internal architecture, deployment details, business-process notes, or secrets if those are present in the selected repositories.

Why it was flagged

The skill tells the agent to recursively read a user-selected repository root and extract technical content, including configuration and manifest files, which may contain sensitive internal details.

Skill content
Escanear ROOT_PATH recursivamente... Extrair: README, build files, manifests, API routes, entities, configs.
Recommendation

Run it only on an intended repository root, exclude secrets and sensitive directories, and review the generated documentation before sharing or committing it.

What this means

The skill should not run project code or alter source repositories, but it may still create files under the chosen output path.

Why it was flagged

The artifact limits the agent to documentation work and explicitly forbids code execution and modification of original repositories, reducing tool-misuse risk while still requiring file read/write activity.

Skill content
Não executar código. Não modificar os repositórios originais. Apenas documentação.
Recommendation

Choose a dedicated OUTPUT_PATH and confirm the agent does not write into the original repositories unless that is intentional.