Security audit
Security checks for vulnerabilities and agentic risk
This skill is a local trace summarizer that reads a nearby execution log and reports timing and size metadata without network access or persistence.
Before installing, understand that this skill reads local execution logs to summarize recent tool calls. Use it only in workspaces where reading claw_execution.log is acceptable, because that log may contain sensitive tool inputs even though this script only outputs size and estimate metadata.
The script extracts with input content from the log and outputs derived metadata about it, which can expose user-provided or system-generated data present in the log. There is no comment, prompt, or user-facing notice warning that logged tool inputs will be read and surfaced by this script.
Several code comments are written in Chinese with no indication that language choice is optional or context-specific. Under the stated policy, forcing a specific language without user opt-in is a natural-language locale violation.
No suspicious patterns detected.
