Chat Summary

ReviewAudited by ClawScan on May 1, 2026.

Overview

This is a coherent chat-summarization skill, but it may read conversation history and optionally save or send summaries to Notion or translation services.

This skill appears benign for summarizing chats. Before installing or using it, confirm which session will be summarized, avoid sensitive/private conversations, review summaries before saving, and use least-privilege credentials for Notion or translation providers.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If used on the wrong session, private chat content could be included in a summary or archive.

Why it was flagged

The skill is designed to read prior chat/session history. That is central to summarization, but prior conversations may contain sensitive or private information.

Skill content
openclaw sessions --json
openclaw sessions_history --session-key <key> --limit <n>
Recommendation

Use it only for selected conversations, keep limits narrow, and review the summary before saving or sharing it.

What this means

A summary could be written into the connected Notion workspace using the configured integration.

Why it was flagged

The skill can use a Notion API key to create pages in a configured workspace. This is purpose-aligned but uses delegated account authority that is not declared as a primary credential in metadata.

Skill content
API Key: 从 `skills.entries.notion` 读取
父页面 ID: 配置中指定(如 DRAFTS)
Recommendation

Use a least-privilege Notion integration, restrict it to the intended parent page, and review content before exporting.

What this means

Chat content or summaries may be processed by an external provider if translation is used.

Why it was flagged

The optional translation workflow can send text or summaries to third-party translation providers. This is disclosed and purpose-aligned when translation is requested, but it changes the data boundary.

Skill content
使用 DeepL API / Google Translate / OpenAI 翻译
Recommendation

Avoid external translation for sensitive conversations unless you trust the chosen provider and understand its data handling.

What this means

Some advertised functionality may rely on code or templates not present in the reviewed artifacts.

Why it was flagged

SKILL.md references helper files that are not included in the supplied manifest. There is no evidence of hidden execution, but any later-added helper code would need separate review.

Skill content
`cluster_topics.py` - 话题聚类算法
`export_notion.py` - Notion API 导出
`output-templates.md` - 输出模板示例
Recommendation

Do not run or install additional helper files unless they are supplied from a trusted source and reviewed.