Back to skill
v1.0.0

Content Researcher

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 7:16 AM.

Analysis

The skill is coherent and purpose-aligned, using web search and optional summarization to create reports, with ordinary cautions around external dependencies, LLM summaries, and the chosen output file.

GuidanceThis skill appears safe for its stated purpose. Before installing, make sure you trust the claw and summarize tools, choose an output path that is safe to overwrite, and manually review generated research before using it for public posts or business decisions.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Tool Misuse and Exploitation
SeverityLowConfidenceHighStatusNote
source/content_researcher.py
subprocess.run(["claw", "tools", "web_search", "--query", query, ...]); ... with open(output_path, 'w', encoding='utf-8') as f: f.write(report)

The skill invokes local CLI tools and writes a report to a user-chosen path. This is central to its purpose and disclosed, but users should be aware it performs tool actions and can overwrite the selected output file.

User impactRunning the skill will perform web searches and create or overwrite the specified report file.
RecommendationUse an intended output path, review generated reports before reusing them, and keep search/result limits reasonable.
Agentic Supply Chain Vulnerabilities
SeverityInfoConfidenceHighStatusNote
SKILL.md
需要安装这两个工具(均通过 clawhub 安装) ... clawhub install summarize

The skill relies on separately installed claw/summarize commands. This is disclosed and purpose-aligned, but the trustworthiness of those external tools affects the skill.

User impactThe behavior of this skill partly depends on the installed versions of claw and summarize.
RecommendationInstall dependencies from trusted ClawHub sources and review the summarize skill separately if you enable AI summaries.
Sensitive data protection

Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.

Memory and Context Poisoning
SeverityLowConfidenceHighStatusNote
SKILL.md
包含:所有搜索结果的标题、来源、链接、摘要 ... 如果启用 `--summarize`,还有 AI 生成的总结

The skill saves retrieved web snippets and AI-generated summaries into a reusable report. Online source content can be inaccurate, biased, or adversarial, even though collecting it is the intended function.

User impactGenerated research reports may contain unverified web content or summaries that should not be treated as authoritative without review.
RecommendationVerify important claims and links before publishing or feeding the report into other content-generation or publishing skills.