Summarize

Summarize URLs or files with the summarize CLI (web, PDFs, images, audio, YouTube).

Security Scan

The skill is internally consistent with its stated purpose — it is an instruction-only wrapper that expects the external 'summarize' CLI and standard LLM provider API keys — nothing obviously out of scope or malicious was found.

Purpose & Capability

The name/description (summarize URLs/files/YouTube) matches what the instructions do: call the external 'summarize' CLI and send content to LLM providers. However, registry metadata listed no required binaries while the SKILL.md metadata declares a required 'summarize' binary and a brew install entry — this mismatch should be verified (the skill will only work if the external CLI is present or installed).

Instruction Scope

Runtime instructions simply show how to invoke the summarize CLI, specify provider API keys, and optional fallback tokens (FIRECRAWL/APIFY). The SKILL.md does not instruct the agent to read unrelated files, network endpoints, or system credentials beyond the declared CLI/config and provider keys.

Install Mechanism

There is no packaged install in the registry, but the SKILL.md metadata suggests installing a brew formula from steipete/tap/summarize. Installing from a third‑party brew tap is common but carries more trust risk than an official/tapped formula — verify the tap and formula source before installing.

Credentials

Requested environment variables are API keys for LLM providers (OPENAI_API_KEY, ANTHROPIC_API_KEY, XAI_API_KEY, GEMINI_API_KEY) and optional service keys (FIRECRAWL_API_KEY, APIFY_API_TOKEN). These are proportionate to a tool that extracts content and forwards it to models/fallback services. The skill also references a user config file (~/.summarize/config.json), which is expected.

Persistence & Privilege

Skill is instruction-only, does not request permanent presence (always:false), and does not claim to modify other skills or system-wide settings. Normal autonomous invocation is allowed by platform defaults.

Assessment

This skill is an instruction-only wrapper that expects the external 'summarize' CLI. Before installing/using it: (1) ensure you have or trust the 'summarize' binary — SKILL.md suggests installing via brew from steipete/tap (review that tap/formula source on GitHub to confirm it’s legitimate); (2) be aware the CLI will send file/URL content to whichever model provider you configure, so only use provider API keys you trust and avoid sending sensitive content; (3) optional FIRECRAWL/APIFY tokens enable fallback extraction services — those services will receive URLs/content, so review their policies; (4) note the small metadata mismatch (registry showed no required binaries while SKILL.md lists the summarize binary) — verify that the agent/platform will not attempt unexpected installs and that you control any API keys used. If you want higher assurance, inspect the brew formula and the summarize CLI source before granting network keys.

Fast CLI to summarize URLs, local files, and YouTube links.

Quick start

summarize "https://example.com" --model google/gemini-3-flash-preview
summarize "/path/to/file.pdf" --model google/gemini-3-flash-preview
summarize "https://youtu.be/dQw4w9WgXcQ" --youtube auto

Model + keys

Set the API key for your chosen provider:

• OpenAI: OPENAI_API_KEY
• Anthropic: ANTHROPIC_API_KEY
• xAI: XAI_API_KEY
• Google: GEMINI_API_KEY (aliases: GOOGLE_GENERATIVE_AI_API_KEY, GOOGLE_API_KEY)

Default model is google/gemini-3-flash-preview if none is set.

Useful flags

• --length short|medium|long|xl|xxl|<chars>
• --max-output-tokens <count>
• --extract-only (URLs only)
• --json (machine readable)
• --firecrawl auto|off|always (fallback extraction)
• --youtube auto (Apify fallback if APIFY_API_TOKEN set)

Config

Optional config file: ~/.summarize/config.json

{ "model": "openai/gpt-5.2" }

Optional services:

• FIRECRAWL_API_KEY for blocked sites
• APIFY_API_TOKEN for YouTube fallback