Message Parser RE-India

• Risk level: Low
• Analyzed: May 1, 2026, 5:58 AM
• Findings: 1
• Version: 1.0.5

Overview

This is a coherent instruction-only parser for WhatsApp exports, with the main caution that parsed chats may be passed to a disclosed downstream lead-processing chain if that workflow is used.

Safe to install for parsing chat exports, but only provide WhatsApp exports you are comfortable processing and confirm before chaining to lead extraction, action suggestion, or storage.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI07: Insecure Inter-Agent Communication

Low

What this means

If the broader chain is used, private chat contents and sender names may be exposed to downstream skills or stored by a later component.

Why it was flagged

The skill discloses a possible multi-skill chain where parsed WhatsApp contents could be handed to other skills, including a storage step. This is purpose-aligned and the parser itself sets boundaries, but it is still a data-flow users should notice.

Skill content

`message-parser -> lead-extractor -> india-location-normalizer -> sentiment-priority-scorer -> summary-generator -> action-suggester -> lead-storage`

Recommendation

Use the parser alone when you only need structured messages, and explicitly approve any downstream extraction, action suggestion, or storage step.