Tail Tool

AdvisoryAudited by Static analysis on May 4, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the tool is used on a private log, key file, or other sensitive document, the last lines may be displayed in the chat or agent context.

Why it was flagged

The tool reads and prints local file or stdin contents supplied to it. This is expected for a tail utility, but it means sensitive files could be exposed to the agent context if selected.

Skill content
lines = open(args.file).readlines() ... else: lines = sys.stdin.readlines()
Recommendation

Use it only on files you intend the agent to read, and confirm file paths before invoking it on sensitive systems.

What this means

The agent or user may expect real-time following or byte/quiet modes and instead get command errors or miss updates.

Why it was flagged

The documentation advertises options that are not present in the included script, which only implements a file argument and -n/--lines. This appears to be a capability mismatch rather than harmful behavior.

Skill content
Includes follow-mode for watching files that grow in real-time. ... `-f`: Follow file growth ... `-c N`: Show last N bytes ... `-q`: Suppress filename headers
Recommendation

Verify supported options before relying on the skill for monitoring, or update the documentation/implementation so they match.