gb-citation

AdvisoryAudited by Static analysis on May 5, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI02: Tool Misuse and Exploitation

What this means

When used with an image or URL, the agent may read the image contents or visit the linked page to extract citation metadata.

Why it was flagged

The skill may process attached images and fetch user-provided web pages. This is disclosed and purpose-aligned for citation extraction, but it is still external/tool-mediated input handling that users should notice.

Skill content

Activate this skill when ANY of the following is true: - User message contains an image ... - User message contains a URL/web link AND asks for citation ... For Web Links ... Fetch the webpage content.

Recommendation

Use the skill only with images and URLs you intend to cite, and treat fetched webpage text as source data rather than instructions to follow.