findTheBook
PassAudited by ClawScan on May 1, 2026.
Overview
This skill is a straightforward book-search helper that queries public book sites; its main thing to notice is that it uses external web searches and unpinned Python dependencies.
This appears safe for normal book lookup use. Be aware that your book queries are sent to external search/book services, and any manual dependency installation should be done from trusted package sources.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Book topics or titles you ask about may be sent to external search and book websites.
The user-provided query is sent to an external search provider to find Douban pages, which is expected for the skill but means user search interests leave the local environment.
douban_query = f"site:book.douban.com/subject {query}" ... ddg_results = list(ddgs.text(douban_query, max_results=count + 3))Avoid using the skill for highly private reading interests unless you are comfortable with those queries going to external services.
Installing unpinned packages can produce different dependency versions over time.
The skill documents installing third-party Python packages without pinned versions or a lockfile. These dependencies are purpose-aligned, but version pinning would improve reproducibility.
pip install duckduckgo-search requests beautifulsoup4
If installing manually, consider pinning known-good versions or reviewing the packages before use.
