Link Digest
ReviewAudited by ClawScan on May 10, 2026.
Overview
Prompt-injection indicators were detected in the submitted artifacts (ignore-previous-instructions); human review is required before treating this skill as clean.
This appears safe to use if you want automated Discord link digests. Before installing, confirm the Discord channel ID is correct, set KB_DIR to a dedicated folder, and review generated notes or git commits before sharing or pushing them. ClawScan detected prompt-injection indicators (ignore-previous-instructions), so this skill requires review even though the model response was benign.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may create visible Discord threads and posts in the configured channel.
The workflow uses delegated Discord access to read from the configured channel and also instructs creating threads and sending messages.
message(action=read, channel=<LINK_DIGEST_CHANNEL_ID>, limit=10)
Use a channel ID where this behavior is desired and ensure the agent's Discord permissions are limited to appropriate channels.
A misconfigured KB_DIR could cause unintended files to be staged or committed.
The skill instructs the agent to run a git command that mutates the local repository, though it also says to commit only files within KB_DIR.
git add <KB_DIR> && git commit -m "kb: add note from link-digest"
Set KB_DIR to a narrow knowledge-base folder and review git status before pushing commits.
Summaries and source URLs can persist in the local knowledge base and be reused later.
The workflow creates persistent local knowledge-base entries from analyzed links, which may later influence future work.
Append a distilled note to the appropriate KB file.
Review generated KB entries for accuracy and avoid processing links whose source URL or summary should not be retained.