epub-eink-optimizer

PassAudited by ClawScan on May 1, 2026.

Overview

The skill appears aligned with optimizing EPUBs for e-ink readers, but it overwrites the selected EPUB and relies on a manual unpinned Pillow install, so users should back up files and try dry-run first.

This looks like a normal EPUB image-optimization skill. Before installing or using it, create a backup of the EPUB, run `--dry-run` to preview what would change, and install Pillow in a trusted isolated Python environment if needed.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI02: Tool Misuse and Exploitation

What this means

Running the default command can permanently reduce image quality or remove small images from the selected EPUB if the user has no backup.

Why it was flagged

The script writes optimized content back to the same EPUB path when not in dry-run mode, so the original file can be changed in place.

Skill content

if not args.dry_run:
        print("写入epub...")
        write_epub(files, args.epub)

Recommendation

Run with `--dry-run` first and keep a backup copy of the EPUB before applying full optimization.

Note

ASI04: Agentic Supply Chain Vulnerabilities

What this means

Installing dependencies can affect the user’s Python environment, and an unpinned package may change over time.

Why it was flagged

The skill depends on a manually installed, unpinned Python package. This is expected for image processing, but users should be aware of the dependency source.

Skill content

pip install Pillow

Recommendation

Install Pillow from a trusted package index, preferably in a virtual environment, and consider pinning a known-good version.