Document Congruence Checker

• Risk level: Low
• Analyzed: May 5, 2026, 5:15 PM
• Findings: 1
• Version: 1.0.0

Overview

This instruction-only skill appears coherent and benign; it compares user-provided documents and only notably may run local document-parsing commands.

This looks safe for its stated purpose. Before installing, note that document contents may be read and parsed locally, and the generated report may contain sensitive contract, financial, or personal details; review reports before sharing and avoid using untrusted document parsing tools.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI02: Tool Misuse and Exploitation

Low

What this means

Documents could be processed by local parsing tools, so malformed or untrusted files carry the normal risks of local file conversion utilities.

Why it was flagged

The skill may invoke local command-line document parsers. This is purpose-aligned for PDF/DOCX extraction, but it means user-provided files may be passed to local executables.

Skill content

- `exec` - Run document parsing tools (pdftotext, docx2txt, etc.)

Recommendation

Use trusted, up-to-date parsing tools and keep command execution limited to document extraction for files the user intentionally provides.