Back to skill
Skillv3.0.0
ClawScan security
Doc Summarize Pro · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 19, 2026, 12:33 AM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill's code, instructions, and requested resources are consistent with a local document summarizer and do not ask for unrelated credentials or network access.
- Guidance
- This skill appears to be a local-only summarizer: it does not require credentials or network access. Before installing, note that it will create a directory $HOME/.doc-summarize-pro containing a config file and history.log (which records commands and file names/timestamps). If you process sensitive documents and want no traces, avoid running it on those files or manually clear the history/config afterwards. Otherwise the tool is self-contained and coherent with its stated purpose.
Review Dimensions
- Purpose & Capability
- okName/description match the included scripts and commands. All required operations (summarize, keywords, outline, compare, batch, export, etc.) are implemented locally in the provided bash/Python scripts and rely on local files — nothing extraneous is requested.
- Instruction Scope
- noteInstructions direct the agent to run included scripts on local files and directories, which is expected. The skill stores config and history under $HOME/.doc-summarize-pro; history.log records commands and file paths/timestamps (privacy consideration). There are no instructions to read unrelated system files or transmit data externally.
- Install Mechanism
- okNo install spec — the skill is instruction-only with bundled scripts that run from the skill package. Nothing is downloaded or written outside the $HOME/.doc-summarize-pro directory created by the scripts.
- Credentials
- okNo environment variables, credentials, or external tokens are requested. The scripts use $HOME for config/history (reasonable for a local CLI tool) and no other sensitive env vars are accessed.
- Persistence & Privilege
- okalways is false and the skill only writes its own config and history under $HOME/.doc-summarize-pro. It does not modify other skills or system-wide agent settings.