Summarize Jarvis

Summarize URLs or files with the summarize CLI (web, PDFs, images, audio, YouTube).

Security Scan

The skill is internally consistent: it's an instruction-only wrapper for a CLI named `summarize` and only asks the user to provide model API keys and optional crawler tokens that are appropriate for a summarization tool.

Purpose & Capability

Name/description match the required binary and instructions. Requiring a `summarize` CLI and listing provider API keys (OPENAI_API_KEY, ANTHROPIC_API_KEY, XAI_API_KEY, GEMINI_API_KEY) is proportional for a tool that sends content to LLM providers to produce summaries.

Instruction Scope

SKILL.md only directs the agent to run the `summarize` CLI against URLs, files, or YouTube links, and documents optional config at ~/.summarize/config.json and optional tokens (FIRECRAWL_API_KEY, APIFY_API_TOKEN). It doesn't instruct reading unrelated system files or exfiltrating secrets beyond the listed provider and service keys.

Install Mechanism

Install uses a Homebrew formula from a third-party tap (steipete/tap/summarize). This is a common but higher-trust install path than the official Homebrew/core tap; it pulls code from an external source that will install a binary on disk. No archives or obscure URLs are used in the SKILL.md itself.

Credentials

The skill does not require any env vars by default, but documents several provider keys and optional tokens. Requesting API keys for LLM providers and optional crawler tokens is expected for this functionality, but users should be aware those keys enable the CLI to send content to external services.

Persistence & Privilege

Skill is not forced-always, has no special privileges, and is instruction-only (no code written by the skill itself). It does reference an optional per-user config file (~/.summarize/config.json) which is reasonable for configuring the CLI.

Assessment

This skill is coherent: it wraps a separate `summarize` CLI which will send content to LLM providers and optional crawler services. Before installing, review the Homebrew tap (steipete/tap) and the summarize project's homepage (https://summarize.sh) to confirm you trust the source and understand its privacy policy (what it sends to external APIs). Only provide API keys you trust to external LLM/crawler services, and consider installing the `summarize` binary in a sandbox or VM if you want to limit risk. Note: the package metadata shows a minor version mismatch (_meta.json 1.0.1 vs registry 1.0.0) — this is likely harmless but you may want to verify the exact release before installing.

Summarize

Fast CLI to summarize URLs, local files, and YouTube links.

Quick start

summarize "https://example.com" --model google/gemini-3-flash-preview
summarize "/path/to/file.pdf" --model google/gemini-3-flash-preview
summarize "https://youtu.be/dQw4w9WgXcQ" --youtube auto

Model + keys

Set the API key for your chosen provider:

• OpenAI: OPENAI_API_KEY
• Anthropic: ANTHROPIC_API_KEY
• xAI: XAI_API_KEY
• Google: GEMINI_API_KEY (aliases: GOOGLE_GENERATIVE_AI_API_KEY, GOOGLE_API_KEY)

Default model is google/gemini-3-flash-preview if none is set.

Useful flags

• --length short|medium|long|xl|xxl|<chars>
• --max-output-tokens <count>
• --extract-only (URLs only)
• --json (machine readable)
• --firecrawl auto|off|always (fallback extraction)
• --youtube auto (Apify fallback if APIFY_API_TOKEN set)

Config

Optional config file: ~/.summarize/config.json

{ "model": "openai/gpt-5.2" }

Optional services:

• FIRECRAWL_API_KEY for blocked sites
• APIFY_API_TOKEN for YouTube fallback