Reader
PassAudited by ClawScan on May 1, 2026.
Overview
The skill is a local document reader and summarizer with no network or credential behavior, but it can read specified local files and keeps a small local history.
This looks safe for local reading tasks. Before installing, be aware that it can read any local text file path you provide and it records local session history; avoid processing sensitive files unless you are comfortable with their contents entering the agent conversation and their paths being retained locally.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If pointed at a sensitive local file, the file's text may be printed or summarized into the conversation.
The helper reads whatever local file path is supplied by the workflow; this is central to the skill's purpose, but it means sensitive files should only be provided intentionally.
def read_text_file(path: str) -> str:
with open(path, "r", encoding="utf-8", errors="replace") as f:
return f.read()Use explicit document paths and avoid asking the skill to process private or credential-containing files unless that is intended.
Document paths and usage times may remain on disk after the reading task is complete.
The skill records session metadata, including file paths and timestamps, into persistent local history; similar history writes appear in other workflow scripts.
history["sessions"].append({
"type": "summary",
"style": args.style,
"file": args.file,
"created_at": datetime.now().isoformat()
})
save_history(history)Review or delete ~/.openclaw/workspace/memory/reader/history.json if local history retention is undesirable.
Users may not notice the python3 requirement from metadata alone, though no external package installation is requested.
The Python runtime requirement is disclosed in SKILL.md and is purpose-aligned, but it is not reflected in the registry requirements shown for the skill.
## Runtime Requirements - Python 3 must be available as `python3` - No external packages required
The publisher should declare python3 in metadata; users should verify Python 3 is available before relying on the scripts.