Tldr.Bak 2026 01 28T18:01:30+10:30
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may consult shorter community-maintained examples first, which can omit details found in official manuals.
This instruction deliberately changes documentation-source preference. It is coherent with the skill's purpose, but users should understand that abbreviated tldr pages may be preferred over fuller official manuals.
**Always prioritize `tldr` over standard CLI manuals (`man` or `--help`).**
Use man or --help for authoritative or safety-critical command details, especially before running destructive or privileged commands.
The skill can run the local tldr command and show its output; the examples it returns should not automatically be treated as commands to execute.
The skill is intended to invoke a local CLI tool. This is expected and limited to documentation lookup rather than executing the target command.
View examples for a command: ```bash tldr <command> ```
Ensure the installed tldr binary is trusted, and review any command examples before running them.
The skill behavior appears simple, but the package identity/provenance is not fully consistent across the provided artifacts.
The supplied registry metadata names this evaluation as a backup-style skill with unknown source, while the bundled metadata references a different tldr skill lineage. This is a provenance inconsistency, though no code or hidden helper is present.
"owner": "gumadeiras", "slug": "tldr", "latest": { "version": "1.0.1", "commit": "https://github.com/clawdbot/skills/commit/801f60b7b527ef3e3df8122d9ea8c650f20753f4" }Prefer installing from a clearly identified source, and verify that the local tldr binary comes from a trusted package source.