Back to skill
v1.0.0

chapter-manual

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 8:00 AM.

Analysis

This instruction-only skill is coherently focused on turning user-specified documents into a structured handbook, with expected file reading and editing behavior.

GuidanceThis skill appears safe for its stated purpose. Before using it, choose a narrow source directory, avoid including confidential files unless you want them summarized into the handbook, and review the proposed structure before allowing broad edits or reorganization.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Tool Misuse and Exploitation
SeverityLowConfidenceHighStatusNote
SKILL.md
读取用户指定目录下的所有 .md 文件 ... 如果用户提供了 URL 链接,使用 WebFetch 工具抓取内容

The skill directs the agent to read many local Markdown files from a user-selected directory and optionally fetch URL content. This is expected for building a handbook, but users should ensure they choose the intended directory and links.

User impactThe agent may process a large set of local documents and web content while building the manual.
RecommendationUse a clearly scoped source directory, avoid including unrelated private files, and review the proposed table of contents before allowing the agent to write the handbook.
Sensitive data protection

Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.

Memory and Context Poisoning
SeverityLowConfidenceHighStatusNote
SKILL.md
保留关键细节:重要的数据、公式、配置项、代码示例要完整保留

The handbook may persist detailed summaries, data, configuration values, and code examples from source materials. This is purpose-aligned, but it can retain sensitive information if such content is present in the inputs.

User impactSensitive details from source documents could be copied or summarized into the generated handbook files.
RecommendationReview source materials for secrets or private information before processing, and store the generated handbook in an appropriate location.