Competitor Analyzer
v1.0.0Generate a detailed competitive analysis report for any company, including overview, pricing, social media, recent news, and SWOT-lite insights.
⭐ 0· 825·4 current·5 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's name and description match what the files do: gather public web search results and produce a markdown report. Minor inconsistency: the registry metadata lists no required binaries, but both SKILL.md and analyze.sh require curl and python3 (the script calls curl and invokes python3 for URL encoding and HTML parsing). This is likely a documentation/metadata omission rather than malicious.
Instruction Scope
SKILL.md instructs running the bundled analyze.sh and (optionally) using the agent's web_search tool. The script only performs web searches against DuckDuckGo HTML, parses public search snippets, formats a report, and writes it to the current working directory. It does not read other files, access environment variables, or send data to unexpected third-party endpoints.
Install Mechanism
No install spec is provided (instruction-only with an included script). No external archives or downloads are performed. The script is run locally and uses system utilities (curl, python3).
Credentials
The skill requests no credentials, secrets, or config paths. The script does not reference any environment variables or require access to unrelated services.
Persistence & Privilege
The skill does not request always:true and does not modify other skills or system-wide settings. It writes a report file to the current directory (expected behavior) and prints it to stdout.
Assessment
This skill appears to do what it says: it scrapes public search results and builds a markdown report. Before installing or running it, note the following: (1) the script uses curl and python3 even though the registry metadata lists no required binaries — ensure curl and python3 are present. (2) It queries DuckDuckGo HTML (https://html.duckduckgo.com/html/) and parses the returned HTML; this is scraping and may be brittle or return incomplete results. (3) The script writes a report file to your current working directory; run it in a location where writing is safe. (4) There are no credentials requested and no hidden/external endpoints in the code, but as with any script, inspect it yourself and run it in an isolated environment if you have concerns. If you plan to let an agent run this autonomously, be aware the agent will perform web searches on your behalf (no secrets are sent).Like a lobster shell, security has layers — review code before you run it.
latestvk978dd150ptw4gabracw8cgc4s81mf31
License
MIT-0
Free to use, modify, and redistribute. No attribution required.