Diff Tool
Security checks across static analysis, malware telemetry, and agentic risk
Overview
This appears to be a straightforward local text/file comparison tool; its only notable risk is that it prints contents from files the user asks it to compare.
This skill is reasonable to install if you need local text or file diffs. Remember that diff output includes the changed file contents, so do not compare files containing secrets or private data unless you are comfortable exposing those lines to the agent session.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If the tool is used on confidential files, the differing lines may be exposed in the conversation or logs.
The tool reads user-supplied local file paths and later prints the differences. This is expected for a diff tool, but it means sensitive file contents can appear in the agent output if such files are selected.
file_parser.add_argument('file1', help='第一个文件路径') ... with open(file1, 'r', encoding='utf-8') as f: lines1 = f.readlines()Use it only on files you intend to compare and reveal to the agent; avoid secrets, credentials, or private documents unless that disclosure is acceptable.
