Clawdbot Documentation Expert

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If used, the helper scripts will run locally, contact the Clawdbot documentation site, and create cache/index files on the machine.

Why it was flagged

The skill explicitly exposes local shell scripts for fetching and indexing documentation. This is expected for the skill's purpose, but users should know the skill can run local helper commands.

Skill content
./scripts/build-index.sh fetch    # Download all docs
./scripts/build-index.sh build    # Build search index
Recommendation

Treat the scripts as normal local tooling: review them if desired and only run the indexing commands when you want local cached documentation.

What this means

Installing qmd would add a separate tool from outside this skill, so its provenance and version matter.

Why it was flagged

Semantic search depends on an optional external qmd binary that is not installed automatically and is not pinned in the artifacts.

Skill content
qmd not found. Install with: cargo install qmd
Recommendation

Only install qmd from a trusted source if you need semantic search; otherwise the grep-based fallback and other scripts can be used without it.