Readeck

PassAudited by ClawScan on May 1, 2026.

Overview

This is a simple Readeck API instruction skill; it uses a Readeck API key and can add, list, update, or delete bookmarks, which is disclosed and aligned with its purpose.

Before installing or using this skill, make sure the Readeck URL is your intended server, provide only the API key you want the agent to use, and double-check any bookmark ID before update or delete actions.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI03: Identity and Privilege Abuse

What this means

Anyone using the configured API key can access or change the associated Readeck bookmarks according to that key's permissions.

Why it was flagged

The skill uses a bearer API key for the user's Readeck account. This is expected for the integration, but users should recognize that the key grants account access for the documented bookmark operations.

Skill content

Configure Readeck access via:
- Request parameters: `url` and `apiKey`
- Environment variables: `READECK_URL` and `READECK_API_KEY`

Recommendation

Use a Readeck API key with the narrowest available permissions, keep it private, and only provide it when you intend the agent to operate on that Readeck account.

Low

#ASI02: Tool Misuse and Exploitation

What this means

The agent could delete a saved Readeck entry when asked to manage bookmarks, which may be difficult to undo depending on Readeck's behavior.

Why it was flagged

The skill documents a destructive Readeck API operation. Deleting bookmarks is consistent with 'managing bookmarks,' but it can remove user data if the wrong ID is used.

Skill content

### Delete Entry

```bash
curl -X DELETE "$READECK_URL/api/bookmarks/$ID" \
  -H "Authorization: Bearer $READECK_API_KEY"
```

Recommendation

Confirm the bookmark ID and intended action before allowing delete or update operations.

Info

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

Users have less external context for verifying who maintains the skill or where its instructions came from.

Why it was flagged

The artifact has limited provenance information. This is a minor note because there is no code or install step, only runtime instructions.

Skill content

Source: unknown
Homepage: none

Recommendation

Review the SKILL.md instructions before use and verify the Readeck API endpoint is your intended server.