Adversarial Review
Analysis
The skill mostly matches its adversarial document-review purpose, but one helper script evaluates a user-supplied destination path in a way that could run unintended shell commands.
Findings (5)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.
DEST=$(eval echo "$DESTINATION")
The script evaluates a user-supplied destination path as shell syntax before copying the output file. A crafted destination string could cause unintended command execution.
SELF-TRIGGERING: load this skill and run the complexity self-assessment whenever you are about to produce or have just produced any substantial document ... offer the review loop if it qualifies.
The skill can proactively insert a review recommendation into broader document-writing tasks. It says to offer or strongly recommend rather than silently run, so this is a disclosed scope note rather than a concern.
node "$TMPSCRIPT" "$SESSION_NAME" "$REVIEWS_DIR"
The script depends on Node.js, but the registry requirements declare no required binaries. This is a metadata completeness issue for a purpose-aligned helper script.
Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.
sessions_spawn with model=anthropic/claude-opus-4-6, mode=run — all in parallel ... The task field contains the full reviewer prompt ... plus the document content to review.
The skill sends the full document content to multiple spawned reviewer sessions. This is central to the stated review purpose, but it matters for confidential documents and provider/model exposure.
REVIEWS_DIR=~/.openclaw/workspace/reviews ... cp "$INPUT_DOC" "$SESSION_DIR/input/$FILENAME"
The helper creates a persistent local review session and copies the input document into it. This is disclosed and purpose-aligned, but retained review artifacts may contain private content.