large-document-reader

ReviewAudited by ClawScan on May 10, 2026.

Overview

The skill is mostly a document-processing tool, but its included scripts use hard-coded local paths under a specific user's home directory and could read or persist an unintended private document if run.

Review the included scripts before using this skill. The high-level instructions are reasonable for local document processing, but the current helper code should be corrected to accept your chosen input file and output directory instead of using hard-coded paths.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the script is run, it may try to process a private file the user did not explicitly choose, or fail unexpectedly on most systems.

Why it was flagged

The helper script ignores user-supplied input and defaults to reading a specific absolute local file path, which does not match the generic document-processing workflow described in SKILL.md.

Skill content
file_path = "/Users/chenkuan/Desktop/毕业论文/规模与杠杆对银行系统性风险的影响研究_王怡涵.txt"
Recommendation

Replace hard-coded paths with explicit user-provided input and output parameters, and require confirmation before reading or writing document files.

What this means

Sensitive document text could remain in the agent workspace and be reused or exposed later outside the user's intended output folder.

Why it was flagged

The script persists extracted chapter data, including chapter content, into a fixed OpenClaw workspace path rather than a clearly disclosed, user-selected location.

Skill content
with open('/Users/chenkuan/.openclaw/workspace/large-document-reader-1.0.0/chapters_info.json', 'w', encoding='utf-8') as f:
        import json
        json.dump(chapters, f, ensure_ascii=False, indent=2)
Recommendation

Store outputs only in a user-approved project directory, clearly disclose retention, and provide cleanup instructions for generated chapter and summary files.

What this means

The generated chapter files, JSON summaries, and index may preserve sensitive or copyrighted material on disk.

Why it was flagged

Creating reusable local summaries and chapter files is aligned with the skill's purpose, but users should understand that generated files may contain sensitive document content.

Skill content
Wants to build a reusable, queryable knowledge base from a PDF, Markdown, or text file.
Recommendation

Use the skill only on documents you are comfortable storing locally, and delete generated outputs when they are no longer needed.