Readeck Save

PassAudited by ClawScan on May 1, 2026.

Overview

This skill does what it says: it saves a supplied URL to your configured Readeck account, with expected cautions around using an API token.

This appears safe for its stated purpose. Before installing, make sure READECK_URL is your own Readeck instance, use a limited API token if Readeck supports one, and only ask the agent to save URLs you want stored in your reading list.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI03: Identity and Privilege Abuse

What this means

The skill can add bookmarks to the Readeck account associated with the configured token.

Why it was flagged

The skill requires a Readeck API token and instance URL so it can authenticate API requests. This is expected for saving bookmarks, but it gives the skill delegated access to the configured Readeck account.

Skill content

export READECK_URL="https://your-readeck-instance.com"
export READECK_API_TOKEN="your-api-token"

Recommendation

Use the least-privileged Readeck API token available, store it only in the intended environment, and revoke or rotate it if it is exposed.

NoteHigh Confidence

ASI02: Tool Misuse and Exploitation

What this means

Saving a URL creates a bookmark and may cause the Readeck server to fetch that page.

Why it was flagged

The helper uses curl to post the provided URL to the configured Readeck API. This matches the skill purpose, but it is still an external API write using user- or agent-supplied input.

Skill content

curl -s -X POST "${READECK_URL}/api/bookmarks" \
  -H "Authorization: Bearer ${READECK_API_TOKEN}" \
  -H "Content-Type: application/json" \
  -d "{\"url\": \"$URL\"}"

Recommendation

Use it only for URLs you actually want saved, and review unusual or internal/private URLs before submitting them.

NoteMedium Confidence

ASI04: Agentic Supply Chain Vulnerabilities

What this means

There is limited external information to verify the publisher or project origin before configuring an API token.

Why it was flagged

The published artifacts provide limited provenance information and no install specification. The included script is small and consistent with SKILL.md, so this is a transparency note rather than a concern.

Skill content

Source: unknown
Homepage: none
No install spec — this is an instruction-only skill.

Recommendation

Review the included script and confirm you trust the skill source before setting READECK_API_TOKEN.