Sitemapper
v2.0.3Reference tool for devtools — covers intro, quickstart, patterns and more. Quick lookup for Sitemapper concepts, best practices, and implementation patterns.
⭐ 0· 137·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (reference for devtools) matches the actual files and behavior: SKILL.md describes plain-text reference output and the included script emits documentation via heredocs. The only minor mismatch is the script's VERSION variable (script contains VERSION="2.0.2" while metadata is 2.0.3), which appears to be a benign packaging/versioning inconsistency.
Instruction Scope
SKILL.md explicitly states there are no external API calls and no credentials are needed. The runtime script implements only heredoc output and simple CLI command dispatch; it does not read arbitrary files, environment variables, network endpoints, or perform other unexpected actions.
Install Mechanism
There is no install spec (instruction-only skill with a bundled script). Nothing is downloaded or written to disk by an installer. The provided shell script is self-contained and does not attempt to fetch external resources.
Credentials
The skill declares no required environment variables, credentials, or config paths, and the script does not access environment variables or secrets. No disproportionate credential access is requested.
Persistence & Privilege
always:false (default) and autonomous invocation is not specially elevated. The skill does not modify other skills or system-wide settings and does not request permanent presence or elevated privileges.
Assessment
This skill appears to do exactly what it claims: it prints static reference documentation and does not contact any external services or request credentials. Before installing, note two small, non-security issues: (1) the packaged script sets VERSION="2.0.2" while the registry metadata is 2.0.3, and (2) the help heredoc in the script uses a single-quoted delimiter so the $VERSION variable will not expand (a cosmetic bug that affects displayed version text). If you plan to run the script on an agent, it's safe from a permissions/credential perspective, but as with any third-party script, you may want to inspect or run it in a sandboxed environment first. If you need absolute assurance, request the author to fix the version string and the help heredoc so outputs are correct.Like a lobster shell, security has layers — review code before you run it.
latestvk97c41zadtmv1e146j7c8msrxd83hggf
License
MIT-0
Free to use, modify, and redistribute. No attribution required.