Back to skill
Skillv1.0.0
ClawScan security
Book to Skill Converter 书本即技能 · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 9, 2026, 4:34 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This skill's declared purpose (extracting content from uploaded books and producing skill templates) matches the files and instructions provided; it requests no credentials and contains only a small local extractor script and templates.
- Guidance
- This package appears internally consistent and focused on extracting book content and producing skill markdown. Before using: (1) verify you have the right to upload/process the books (copyright/privacy); (2) review and, if desired, run book_extractor.py locally in a sandbox to confirm behavior and install only the needed Python dependencies; (3) note mobi extraction creates a temporary .html file in the same directory — ensure that location is acceptable; (4) because source/homepage are unknown, consider the governance risk (no identified publisher) and prefer running locally rather than granting remote execution or broad filesystem access. If you need higher assurance, ask the publisher for provenance or a signed release/homepage.
Review Dimensions
- Purpose & Capability
- okName/description, SKILL.md, templates, analysis guide, and the included book_extractor.py all align: they extract text from common ebook formats and generate skill markdown. The required libraries (PyPDF2, ebooklib, mobi, python-docx) are reasonable and relevant.
- Instruction Scope
- okSKILL.md restricts actions to reading uploaded book files, extracting chapter/section content, structuring outputs, showing results for user confirmation, and saving to a user-specified location. It does not instruct reading unrelated system files, environment variables, or sending data to external endpoints.
- Install Mechanism
- okNo install spec — instruction-only with a small helper script. The script depends on common Python libraries but does not download or execute code from arbitrary URLs or create nonstandard system changes.
- Credentials
- okThe skill requests no environment variables, credentials, or config paths. The dependencies are typical for file parsing and are proportionate to the stated functionality.
- Persistence & Privilege
- okalways is false (no forced permanence). The skill does not attempt to modify other skills or global agent settings. Normal autonomous invocation is allowed by platform defaults.