Book2kindle
PassAudited by ClawScan on May 10, 2026.
Overview
The skill’s instructions match its book-search/send purpose, but it depends on an unprovided local CLI and can send selected books to Kindle, so users should trust that CLI before use.
Before installing or using this skill, verify that .venv/bin/book2kindle is a trusted executable and understand what service configuration it uses. Review search results carefully before sending, and remember that the workflow may contact Z-Library and Kindle.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If the local book2kindle executable is missing, replaced, or untrusted, the skill could fail or run code the user did not expect.
The skill relies on a local executable, but the provided package has no install spec or code files for that executable, so its implementation and provenance are not reviewable here.
allowed-tools: Bash(.venv/bin/book2kindle *) ... Execute: `.venv/bin/book2kindle $ARGUMENTS`
Only use this skill after independently installing or verifying the .venv/bin/book2kindle CLI from a trusted source.
The agent will run a local program when the user invokes the skill.
The skill intentionally executes a local CLI. This is expected for its stated purpose and is not hidden, but it is still local code execution.
Run the book2kindle CLI to search Z-Library and send EPUBs to Kindle.
Confirm the local CLI is the expected program before invoking search or send commands.
A user-specified book selection may be sent to Kindle without an additional confirmation step when --pick is already provided.
The skill can perform a direct send action when the user supplies a specific pick. This is aligned with the purpose, but it changes an external destination/library.
For `send <title> --pick N`: run `.venv/bin/book2kindle send "<title>" --pick N` directly.
Double-check the title and pick number before using send with --pick.