Article Extract

Security checks across malware telemetry and agentic risk

Overview

This is a simple article-extraction tool that fetches a supplied URL and prints text, with the main caution that it can make outbound requests to arbitrary URLs.

This skill appears coherent and low risk for extracting text from web articles. Before installing or using it, remember that it makes web requests from your environment and should only be pointed at URLs you are allowed to access.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI02: Tool Misuse and Exploitation
Low
What this means

If an unintended local, internal, or non-public URL is supplied, the tool may retrieve and display content from that address.

Why it was flagged

The script fetches whichever URL is provided and prints the extracted text. This is purpose-aligned for an article extractor, but it is broad outbound URL access without visible scheme or domain limits.

Skill content
url = sys.argv[1]
...
with urllib.request.urlopen(req, timeout=30) as response:
Recommendation

Use it only with intended public http(s) article URLs, and consider adding URL scheme/domain validation or confirmation before fetching local or internal addresses.