findTheBook

PassAudited by ClawScan on May 1, 2026.

Overview

This skill is a straightforward book-search helper that queries public book sites; its main thing to notice is that it uses external web searches and unpinned Python dependencies.

This appears safe for normal book lookup use. Be aware that your book queries are sent to external search/book services, and any manual dependency installation should be done from trusted package sources.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Book topics or titles you ask about may be sent to external search and book websites.

Why it was flagged

The user-provided query is sent to an external search provider to find Douban pages, which is expected for the skill but means user search interests leave the local environment.

Skill content
douban_query = f"site:book.douban.com/subject {query}" ... ddg_results = list(ddgs.text(douban_query, max_results=count + 3))
Recommendation

Avoid using the skill for highly private reading interests unless you are comfortable with those queries going to external services.

What this means

Installing unpinned packages can produce different dependency versions over time.

Why it was flagged

The skill documents installing third-party Python packages without pinned versions or a lockfile. These dependencies are purpose-aligned, but version pinning would improve reproducibility.

Skill content
pip install duckduckgo-search requests beautifulsoup4
Recommendation

If installing manually, consider pinning known-good versions or reviewing the packages before use.