Auteng Docs Curl Publish

PassAudited by ClawScan on May 1, 2026.

Overview

This is a straightforward instruction-only skill for publishing markdown to AutEng, with the main caution that the document content is sent to an external service and returned as a shareable link.

Install only if you are comfortable sending the markdown you choose to AutEng for hosted rendering and link sharing. Review documents for secrets or private information before publishing, and use an expiration when appropriate.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI02: Tool Misuse and Exploitation

What this means

If invoked on the wrong text, the markdown could be sent to AutEng and made available through a share link.

Why it was flagged

The skill instructs use of a shell HTTP command to publish content. This is purpose-aligned and disclosed, but it is still an external side-effect that should be intentional.

Skill content

curl -sS -X POST "https://auteng.ai/api/tools/docs/publish-markdown/" \

Recommendation

Use the skill only when you intend to publish the selected markdown, and review the content before sending it.

Low

#ASI07: Insecure Inter-Agent Communication

What this means

Sensitive or private markdown content could be exposed to the external service and anyone who receives the share URL.

Why it was flagged

The artifact shows that document content is transmitted to an external provider and that expiration is optional, so users should consider data sharing and retention.

Skill content

Send JSON with:

- `markdown` (required)
- `title` (optional)
- `expires_hours` (optional)

Recommendation

Do not publish secrets or private information unless you accept the external sharing model; set an expiration when appropriate.