Summarizer (x64 infrastructure)

ReviewAudited by ClawScan on May 10, 2026.

Overview

The skill’s summarization behavior is mostly normal, but its registry identity does not match the bundled metadata, so users should review the source and package provenance before installing.

Before installing, confirm that this is the intended summarizer skill despite the x64/x86 slug and owner mismatch. If you proceed, install only from trusted package sources, use limited API keys, and avoid summarizing sensitive local files unless you are comfortable sending their contents to the configured provider.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A user may believe they are installing one registered skill while the included metadata points to a different skill identity.

Why it was flagged

The published listing and bundled artifacts do not identify the same skill slug or owner, which creates a provenance and packaging ambiguity before installing the external CLI.

Skill content
Registry: slug `summarizerx64`, owner `kn72188592ksrxk608zefm52q181dkzh`; SKILL.md: `name: summarizerx86`; _meta.json: `"ownerId": "kn70pywhg0fyz996kpa8xj89s57yhv26", "slug": "summarizerx86"`
Recommendation

Verify the correct registry listing, owner, and upstream package before installing; the publisher should align the registry metadata, SKILL.md front matter, and _meta.json.

What this means

Using this skill may consume API credits and allow the summarize CLI to submit requests under the user’s provider account.

Why it was flagged

The skill expects provider credentials for normal summarization use. This is purpose-aligned, but users should understand the CLI can spend quota and access the selected provider account.

Skill content
Set the API key for your chosen provider: - OpenAI: `OPENAI_API_KEY` - Anthropic: `ANTHROPIC_API_KEY` - xAI: `XAI_API_KEY` - Google: `GEMINI_API_KEY`
Recommendation

Use dedicated, limited-scope API keys where possible and monitor provider usage.

What this means

Private documents, web pages, or YouTube content chosen for summarization may be sent to third-party providers.

Why it was flagged

The documented workflow summarizes local files and URLs using external model and extraction services. This is expected for the skill, but it means selected content may leave the local machine.

Skill content
`summarize "/path/to/file.pdf" --model google/gemini-3-flash-preview` and optional services: `FIRECRAWL_API_KEY` / `APIFY_API_TOKEN`
Recommendation

Only summarize files or URLs you are comfortable sending to the configured model or extraction provider, and review each provider’s privacy and retention terms.