Security audit
Security checks for vulnerabilities and agentic risk
This is a local summarization skill with disclosed local history/settings storage and no evidence of network exfiltration or deceptive behavior.
Before installing, understand that the skill keeps local usage history and stats automatically under ~/.openclaw/summarize-pro/. Avoid using it on highly sensitive text if local retained metadata is unacceptable, and periodically review or delete its history/settings files if you do not want that record kept.
The skill description claims it should handle "any long content" and many broad phrasings, which creates an overly permissive activation boundary. In practice this increases the chance of accidental invocation on unrelated user text, and because the skill includes automatic history/stat tracking, unintended activation can also create privacy and persistence risks.
This skill establishes persistent local state on first use by creating a dedicated directory and files under the user's home directory. Persistence itself is not always unsafe, but here it becomes a real issue because summaries, usage history, and preferences are stored automatically, increasing the privacy impact of accidental activation or use on sensitive content.
On first message, create data directory:
mkdir -p ~/.openclaw/summarize-pro
The skill initializes local storage and later instructs itself to auto-log every summary, but the first-run/setup flow does not obtain clear user consent before retaining content-derived metadata and saved summaries. Even without network exfiltration, silent retention of sensitive meeting notes, emails, or document summaries can create a local privacy exposure and surprise users.
The trigger phrase "summary" is extremely generic and can appear in ordinary conversation, causing the skill to activate when the user did not explicitly request this tool. Unintended activation matters here because the skill is stateful and writes history/settings data locally, so casual mentions could lead to unexpected processing and retention of user content.
Custom templates are another form of session persistence because user-defined formats are stored and reused across sessions. While less sensitive than raw summaries, these templates can still encode business workflows, project names, or internal structure, and they extend the skill's retained state beyond immediate user expectations.
## FEATURE 19: Custom Templates
When user says **"create template [name]"** or **"my templates"**:
Let users define their own summary format:
Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.
When user says **"summarize in [language]"** or **"hindi mein summarize karo"**:
Supported languages include but not limited to:
Hindi, Spanish, French, German, Japanese, Chinese, Arabic, Portuguese, Italian, Korean, Russian, and more.
Summarize the content and output the summary IN the requested language.
No suspicious patterns detected.