Dizest Summarize

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent external summarizer, but it sends the content you provide to Dizest's API using your Dizest API key.

Install and use this skill if you are comfortable sending the content you ask it to summarize to Dizest. Configure DIZEST_API_KEY securely, and avoid submitting confidential documents or secrets unless Dizest's privacy and retention policies are acceptable to you.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Content submitted for summarization may be processed by a third-party service; sensitive or confidential material should only be submitted if the user is comfortable with Dizest handling it.

Why it was flagged

The skill crosses a data boundary by sending whatever the user provides—URLs, notes, transcripts, or documents—to Dizest's external API for processing.

Skill content
The agent's only job is to forward the user's input to the API exactly as provided.
Recommendation

Review Dizest's privacy and retention terms, and avoid sending secrets or confidential documents unless the provider policies meet your needs.

What this means

Anyone running the skill with this environment variable can make Dizest API requests as the configured account.

Why it was flagged

The skill uses a Dizest account API key to authenticate requests. This is expected for the service but gives the skill delegated access to that account/API quota.

Skill content
All requests require the `x-api-key` header. The value should come from the `DIZEST_API_KEY` environment variable.
Recommendation

Store the API key in the environment rather than pasting it into chats, use any available key-specific controls, and rotate the key if it is exposed.