Product Hunt Launch Tracker
PassAudited by ClawScan on May 1, 2026.
Overview
This skill appears to only fetch public Product Hunt pages and print launch stats, though its Telegram-alert claim is not implemented and its URL check is loose.
This looks safe to use as a simple Node-based Product Hunt stats checker. Before installing, note that it does not appear to implement Telegram alerts, and only provide real Product Hunt URLs to avoid unintended web requests.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If given a crafted or mistaken URL, the script could make a web request to a non-Product-Hunt host, though the artifacts do not show credential sending or raw response exfiltration.
The network request is purpose-aligned, but validation only checks whether the string contains producthunt.com instead of parsing and enforcing the Product Hunt hostname.
if (!productUrl || !productUrl.includes('producthunt.com')) { ... } ... const response = await fetch(productUrl, {Only pass genuine Product Hunt post URLs; the publisher should validate with URL parsing, require HTTPS, and restrict the hostname to producthunt.com or www.producthunt.com.
A user may expect automated Telegram notifications, but this skill appears to only print stats when run.
The skill is advertised as providing Telegram alerts, but the documented commands are only check and trend, and the provided files contain no Telegram configuration or alert-sending implementation.
description: Track Product Hunt launch upvotes, comments, and daily ranking in real-time — get Telegram alerts when you move up the leaderboard.
Treat it as a manual/Product-Hunt stats checker unless Telegram support is separately implemented and clearly documented.