epub-eink-optimizer

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI02: Tool Misuse and Exploitation

What this means

Running the default command can permanently reduce image quality or remove small images from the selected EPUB if the user has no backup.

Why it was flagged

The script writes optimized content back to the same EPUB path when not in dry-run mode, so the original file can be changed in place.

Skill content

if not args.dry_run:
        print("写入epub...")
        write_epub(files, args.epub)

Recommendation

Run with `--dry-run` first and keep a backup copy of the EPUB before applying full optimization.

NoteHigh Confidence

ASI04: Agentic Supply Chain Vulnerabilities

What this means

Installing dependencies can affect the user’s Python environment, and an unpinned package may change over time.

Why it was flagged

The skill depends on a manually installed, unpinned Python package. This is expected for image processing, but users should be aware of the dependency source.

Skill content

pip install Pillow

Recommendation

Install Pillow from a trusted package index, preferably in a virtual environment, and consider pinning a known-good version.