End-to-end encrypted .md documents for agents & humans to collaborate. This is a multiplayer alternative to gog and Google Docs that lets people (via CLI) and agents create, search and sync encrypted markdown docs. This service leverages https://ddocs.new which can be enabled locally or via your preferred cloud set-up to make docs accessible across any device or chatbot interface in complete privacy.
PassAudited by ClawScan on May 1, 2026.
Overview
This appears to be a purpose-aligned encrypted-docs connector, but users should understand that it connects an agent to an external MCP server that can handle document contents and key-bearing share links.
Install this only if you trust the Fileverse MCP server URL you configure. Be cautious with sensitive documents, confirm important updates before syncing, and do not share ddoc links unless you intend the recipient to have access.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A misconfigured or untrusted MCP server could receive or control document-related traffic.
The skill relies on connecting the agent to a user-supplied external MCP server, so document data and tool calls depend on that server being trusted and correctly configured.
First, you need to get the `<SERVER_URL>` from the user.
Use only a server URL you operate or trust, and review the MCP provider before enabling it.
The agent may create or modify documents if the user asks it to, and those changes may sync externally.
The MCP tools allow the agent to create and update persistent documents, which is expected for this skill but can still affect user data.
fileverse_create_document ... Create a new document and wait for syncing ... fileverse_update_document ... Update an existing document's title and/or content
Ask the agent to confirm before updating important documents, and keep backups for sensitive or business-critical content.
Sensitive or untrusted markdown content may be read by the agent and reused in later work with the document service.
Retrieved documents can place full document content into the agent context and the service stores documents persistently for future access.
Get a single document by its `ddocId`. Returns the full document including content, sync status, and content hash.
Avoid storing secrets in documents and treat document text as data, not as instructions for the agent to obey.
Users may overestimate the privacy guarantees if they do not understand the server and link-sharing model.
The artifact makes a strong privacy claim while also requiring users to trust a configured server/provider and handle shareable encrypted links.
make docs accessible across any device or chatbot interface in complete privacy
Verify the server setup and be careful sharing document links, especially because the documented links include encryption-key fragments.