v1.0.0

文献自动解析

ReviewClawScan verdict for this skill. Analyzed May 1, 2026, 7:38 AM.

Analysis

The skill’s summarization purpose is simple, but its code makes it activate on every message and force all user input into a literature-summary format.

GuidanceReview this skill carefully before installing. Its document-summary function is straightforward, but the included code makes it always active, so it may interfere with unrelated chats. Prefer a version that is only invoked when you explicitly ask it to parse a document.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Agent Goal Hijack

SeverityMediumConfidenceHighStatusConcern

index.ts

用户发送的任何文本，都视为需要解析的文献内容。 ... 不要解释、不要提问 ... trigger: { type: 'always' }

The code combines an always-on trigger with instructions to reinterpret every user message as literature content and suppress normal clarification or explanation.

User impactAfter installation, unrelated user messages may be forced into the fixed summary/keywords/conclusions format instead of following the user’s actual request.

RecommendationMake the skill explicitly user-invoked or scope activation to clear literature-parsing requests, and allow clarification or normal handling for non-literature input.

Human-Agent Trust Exploitation

SeverityLowConfidenceHighStatusConcern

index.ts

trigger: { type: 'always', // 设为始终触发，即默认技能 }

The code says the skill is always triggered as a default skill, while the registry metadata presents the skill as not always-on; this under-discloses its activation behavior.

User impactA user may expect to call the skill only when needed, but the code indicates it can take effect by default.

RecommendationAlign the registry metadata and code, and clearly disclose whether the skill is always-on before users install it.