Bookmark Organizer
Analysis
The skill appears to do what it claims, but bookmark data and optional link checking can expose private browsing interests if used carelessly.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.
command = ['curl', '-L', '-s', '-o', '/dev/null', '-w', '%{http_code}', '-m', '15', url]The optional dead-link checker uses curl to contact each bookmarked URL. This is disclosed and purpose-aligned, but it sends network traffic to bookmarked sites.
rules = json.load(f) ... file_path = out_path / f"{category}.md"Category names loaded from rules are used as output filenames. The bundled rules use simple safe names, but customized rule names are not sanitized.
Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.
turn a standard browser bookmark export file (HTML) into a clean, categorized, and searchable knowledge base in Markdown format
The skill intentionally turns bookmark history into persistent Markdown knowledge-base files; this is purpose-aligned, but bookmarks may reveal sensitive interests or accounts.