ClawHub

Book Summary

Security checks across malware telemetry and agentic risk

Overview

This skill is a simple local book-summary formatter; its main caveat is that very large input can produce very large output.

Reasonable to install for local book-summary formatting. Avoid feeding extremely large summaries in hosted or metered environments, and do not provide private notes or full copyrighted text unless you are comfortable with that content being repeated in generated outputs.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Output HandlingUnvalidated Output Injection, Cross-Context Output, Unbounded Output
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Unbounded Output

Medium
Category
Output Handling
Content
}

  /**
   * Extract key ideas from summary (no truncation)
   */
  extractKeyIdeas(summary, count = 3) {
    const sentences = summary.split(/[.!?]+/).filter(s => s.trim().length > 0);
Confidence
60% confidence
Finding
no truncation

Unbounded Output

Medium
Category
Output Handling
Content
}

  /**
   * Generate actionable takeaway (no truncation)
   */
  generateTakeaway(sentence) {
    return `Apply this insight: ${sentence.trim()}`;
Confidence
60% confidence
Finding
no truncation

Unbounded Output

Medium
Category
Output Handling
Content
}

  /**
   * Build podcast script (no truncation)
   */
  buildScript(book, ideas, config = {}) {
    let script = `# 📖 ${book.title} — Summary Podcast Script\n\n`;
Confidence
60% confidence
Finding
no truncation

Unbounded Output

Medium
Category
Output Handling
Content
}

  /**
   * Generate text summary (no truncation)
   */
  generateTextSummary(book) {
    if (!book.title || !book.author || !book.summary) {
Confidence
60% confidence
Finding
no truncation

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal