open-novel-writing

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This appears to be a coherent Chinese novel-writing helper that creates and reviews local manuscript files, with disclosed optional automation that can modify many project files.

This skill is reasonable for local novel drafting. Before using batch mode or the optional Python scripts, work in a dedicated project folder, keep backups, and review generated chapters before relying on them.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A single batch request may create or update multiple chapter, specification, and review files before the user reviews each one.

Why it was flagged

The skill can automatically run a multi-chapter generation/revision loop without per-chapter confirmation after the user requests batch writing. This is disclosed and purpose-aligned, but it can affect many manuscript files.

Skill content
“循环执行以下步骤N次” ... “自动修订” ... “章节间隔 | 每章完成后等待用户确认 | 否(自动)”
Recommendation

Use a dedicated project folder, keep backups or version control, and specify exact chapter ranges when using batch writing.

What this means

Running the helper script will execute local Python code that creates and writes novel project files.

Why it was flagged

Although described as conversation-driven, the skill also documents optional execution of bundled Python scripts. This is not hidden, but users should recognize it as local code execution.

Skill content
“CLI 使用” ... “python3 scripts/auto_write.py 10”
Recommendation

Only run the optional scripts after reviewing them, and run them from the intended novel project directory rather than a sensitive folder.