Willhaben

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If used carelessly, the agent could publish an incorrect price, description, shipping option, or photo to the user's public Willhaben account.

Why it was flagged

The skill uses browser automation to publish a public marketplace listing, but the artifact also instructs the agent to present a draft for confirmation first.

Skill content
Present draft for confirmation ... Ready to post? ... just click **"Veröffentlichen"** to publish for free.
Recommendation

Only allow posting after reviewing the full draft, photos, price, package size, pickup/shipping settings, and confirming that no paid promotion options are selected.

What this means

The agent may use the user's signed-in Willhaben session and account details while creating listings.

Why it was flagged

The skill relies on an already authenticated browser profile, giving the agent delegated access to act as the user on Willhaben.

Skill content
Use `clawd` browser profile with saved Willhaben login.
Recommendation

Use only with a browser profile you trust for this purpose, and supervise account actions such as publishing, editing, or uploading listing photos.

What this means

Stored preferences could expose location-related details locally or cause future listings to reuse outdated or incorrect defaults.

Why it was flagged

The skill stores reusable local preferences, including location, shipping, style, and pricing strategy, and applies them to future listings.

Skill content
Write answers to `config/user-preferences.json` ... When creating listings, read `config/user-preferences.json` and apply
Recommendation

Review config/user-preferences.json periodically, remove details you no longer want stored, and confirm preferences before each listing.