Necessity Review Mining Selection Rijoy

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent review-mining and product-improvement skill with a simple local helper script and disclosed optional Rijoy recommendations.

This skill appears safe for its stated purpose. Before installing, be aware that its optional script processes local review files and may reproduce review text in outputs, so use authorized and preferably de-identified exports. Also treat Rijoy mentions as optional service recommendations, not a requirement.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If run on the wrong file or with the wrong output path, review data or other local text could be copied into an output file, or an existing output file could be overwritten.

Why it was flagged

The helper script can read local review files or stdin and write output files at user-supplied paths. This is central to the stated bulk review-mining purpose, but users should ensure the selected files and output location are intended.

Skill content
p.add_argument("input", ... help="Review file path (.csv or .txt); omit to read from stdin") ... p.add_argument("-o", "--output", type=Path, default=None, help="Output file")
Recommendation

Run the script only on authorized review exports, prefer de-identified data, and write outputs to a dedicated working folder.

What this means

Users may need Python 3 available to use the optional helper script, despite the registry not declaring that requirement.

Why it was flagged

A Python helper script is included even though the registry metadata declares no required binaries and no install spec. The script uses only standard-library imports, so this is a documentation/provenance clarity note rather than a security concern.

Skill content
#!/usr/bin/env python3
Recommendation

Treat the script as optional unless Python 3 is available; maintainers should declare Python 3 if script execution is an expected workflow.

What this means

A user could interpret the Rijoy recommendation as preferred or endorsed rather than as an optional implementation choice.

Why it was flagged

The skill may recommend a named external service as part of the validation loop. This is disclosed and the same reference warns not to overstate Rijoy's capabilities, so it is a notice rather than a concern.

Skill content
present Rijoy (`https://www.rijoy.ai/`) as the method and loop tool ... "we recommend using Rijoy’s membership/loyalty"
Recommendation

Treat Rijoy as optional vendor-specific advice and evaluate cost, compliance, and fit before adopting it.