article-idea-capture

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This skill is simple and instruction-only, but it defaults to saving your article ideas into a hard-coded Feishu document and a user-specific local path, so the storage destination should be reviewed before use.

Only install this as-is if the Feishu document is yours and you are comfortable having raw article ideas appended there automatically. Otherwise, edit the skill to use your own document or a workspace-local file and add an explicit confirmation step before saving.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Your unpublished article ideas could be written into a Feishu document whose ownership and permissions are unclear.

Why it was flagged

The skill sends captured ideas to a specific cloud document, but the artifacts do not establish that this document belongs to the installing user or define its sharing and access boundaries.

Skill content
Primary sink:
- Feishu doc: `加十的公众号灵感池`
- URL: `https://www.feishu.cn/docx/BwAFdeJZdoEeeWxfbkbcZVpWnOe`
Recommendation

Before using the skill, replace the Feishu URL with your own document or require explicit confirmation before anything is appended.

What this means

A casual article idea could be saved to the configured Feishu document before you review the destination or content.

Why it was flagged

The workflow instructs the agent to append first and only confirm afterward, which can cause cloud document mutation without a separate approval step.

Skill content
### 2. Append to the idea pool
Prefer appending to the Feishu idea pool doc.

### 3. Confirm what was stored
Recommendation

Change the workflow to ask for confirmation before writing to Feishu, especially when the user has not explicitly asked to save the idea.

What this means

Saved ideas may persist and be reused later, including rough thoughts you may not intend to keep long-term.

Why it was flagged

The skill intentionally creates a persistent idea pool for later ranking, clustering, outlining, and drafting; this is purpose-aligned but means saved content may be reused in future writing tasks.

Skill content
Maintain the user's ongoing article idea pool with low friction.
Recommendation

Use a storage location you control and periodically review or delete old entries you no longer want retained.

What this means

If Feishu is unavailable, the skill may try to write to a path that does not exist or belongs to a different expected user setup.

Why it was flagged

The fallback path is a hard-coded, user-specific absolute path. This is not executable code, but it suggests the skill was authored for a specific environment and may not be portable or appropriate for other users.

Skill content
If Feishu doc append is unavailable, store in:
- `/Users/shiyi/.openclaw/workspace/research/article-idea-pool.md`
Recommendation

Change the fallback path to a workspace-relative or user-configurable file path before relying on local storage.