Book Skill Generator

PassAudited by ClawScan on May 13, 2026.

Overview

This instruction-only skill is coherent with its purpose of turning book methodologies into installable skills, but users should review generated skills before installing them.

This skill appears safe for its stated purpose. Before installing any generated .skill files, review their SKILL.md content, especially if the source book file or web material is private, incomplete, or untrusted.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If you upload a private or untrusted document, its contents may influence the generated skill text.

Why it was flagged

The skill intentionally reads user-uploaded book files to extract methodologies. This is purpose-aligned, but uploaded documents may contain private content or untrusted text.

Skill content
如果用户上传了文件:

1. **读取文件内容**
   - 使用 `read` 工具读取上传的文件
Recommendation

Upload only files you are comfortable having processed, and review the generated skill text before installing or sharing it.

What this means

Generated skills could carry inaccurate, unwanted, or source-influenced instructions into future agent sessions if installed without review.

Why it was flagged

The skill generates new SKILL.md files from book or web content. These generated files can become persistent agent instructions if installed.

Skill content
为每个方法论创建一个独立的 skill 文件夹,结构如下:

```
{methodology-name}/
├── SKILL.md
```
Recommendation

Inspect each generated SKILL.md for accuracy, scope, and safe behavior before installing it.

What this means

Packaging depends on a tool/script that was not reviewed here, so its behavior is not verified by this scan.

Why it was flagged

The workflow references an external packaging script that is not included in the provided manifest. This appears purpose-aligned, but the actual packaging code is outside the reviewed artifacts.

Skill content
使用 `skill-creator` 的打包脚本将每个方法论 skill 打包成 `.skill` 文件:

```bash
python -m scripts.package_skill {methodology-name}
```
Recommendation

Use a trusted packaging tool and avoid running unknown scripts without checking their source.