Skills/ClawHub/summarizer

summarizer@1.0.2

VERIFIED· install only

Publisher claims: "Summarizes any source without losing the claim: documents, meetings, papers, threads, transcripts, data, and code changes. Use when asked to summarize, condense, shorten, recap, distill, or write a TLDR, abstract, or executive summary; when a source is too long to read or must hit a word count; when summarizing a call, interview, Slack channel, pull request, contract, earnings report, podcast, or a stack of sources on one topic; when a summary dropped something important, invented a detail, turned a hedge into a fact, or reads like the headings; and when the same material must be re-cut for another audience, length, or channel. Covers compression ratios, chunking, faithfulness and omission audits. Not for recurring external feeds (`digest`), decision documents whose point is the recommendation (`brief`), cross-source insight generation rather than compression (`synthesize`), or pulling text or a transcript out of a file or video first (`extract-pdf-text`, `youtube-video-transcript`)." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher ivangdavila · publishing for 244 daysInstalls 7,811Last detonated 3 h ago
$clawhub install summarizer
WatchReport an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-10 and scored it 87/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

HIGH
References a credential file in the home directorySKILL.md:40 · References a credential file in the home directory…to disk — `env:STRIPE_API_KEY`, `keychain:vpn`, `1password:Work/DB/prod`, `file:~/.ssh/id_ed25519` — and say in one line that you did it. If data sits at an old location …Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST03
LOW
Instructs the agent to modify its persistent memory or instruction filesverification.md:139 · Instructs the agent to modify its persistent memory or instruction files · informational: not an instruction file…econd month better than the first. **After any correction or failed summary**, write it to `## Corrections` in `~/Clawic/data/summarizer/memory.md` — date, source type, error class from the taxonomy, and the rule that would ha…Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
LOW
Rule modification attemptmulti-source.md:5 · Rule modification attempt — overwriting existing instructions · informational: not an instruction file… the `synthesize` skill is the deliverable, and it is the same line as SKILL.md Rule 9: here the product is **shorter than the inputs and contains no claim the sources…Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
HIGH
Access to sensitive file pathsSKILL.md:40 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files…bove all not in the source the user pastes in. Transcripts, logs, tickets, and `.env` snippets carry live secrets more often than any other input in this catalog: s…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05

Cost to the agent

Instructions loaded
≈6,941 tok
1 file · 18 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.