Summary Generator

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only skill appears benign: it reads lead records only to produce aggregate summaries and includes clear no-write and no-send boundaries.

Before installing, confirm that the runtime enforces read-only access to the intended lead dataset and that any optional downstream chain handles the generated summaries appropriately.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI03: Identity and Privilege Abuse

What this means

The agent may read lead records within the requested date range to calculate summary counts, trends, localities, and priority breakdowns.

Why it was flagged

The skill depends on access to lead records. This is disclosed and read-only, but users should notice that it still requires permission to view potentially sensitive business lead data.

Skill content

Query lead storage using read-only access.

Recommendation

Only enable it in an environment where lead storage access is limited to read-only queries and scoped to the intended datasets.