Markdown Publish & Share

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only skill does what it says—posts markdown to AutEng and returns a share link—but users should only publish content they intend to share externally.

This skill appears purpose-aligned and instruction-only. Before using it, make sure the markdown is safe to share outside your environment, avoid including secrets or private information, and use an expiration time when appropriate.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI07: Insecure Inter-Agent Communication

What this means

Markdown content may be stored by the external service and accessible through the returned share link, so private or secret content could be exposed if published.

Why it was flagged

The skill sends user-supplied markdown to an external provider and creates a shareable document link; expiration is supported but not required.

Skill content

Use this endpoint: `https://auteng.ai/api/tools/docs/publish-markdown/` ... Send JSON with: - `markdown` (required) ... - `expires_hours` (optional)

Recommendation

Publish only content intended for external sharing, remove secrets or private data first, and set `expires_hours` when temporary access is desired.