Back to skill
Skillv1.0.0
ClawScan security
SEO Analyzer · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignFeb 22, 2026, 6:39 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill's code and instructions are consistent with its stated purpose (a local, lightweight SEO analyzer); it fetches and analyzes only the provided page content and does not request credentials or perform unexpected network exfiltration.
- Guidance
- This skill appears to do exactly what it claims: a local Bash script that fetches and analyzes HTML. Before installing or running it, review the script (already included) and run it locally on sample pages. Note: the script fetches whatever URL you provide (curl -sL), so avoid passing sensitive internal URLs if you don't want the agent/environment making requests to internal hosts. The analyzer is simple and non-malicious, but its checks are heuristic and may miscount some tags/attributes—treat recommendations as guidance, not absolute rules.
Review Dimensions
- Purpose & Capability
- okName/description match the included files: SKILL.md documents running seo-analyze.sh, and the script implements the listed checks (title, meta, headings, images, Open Graph, canonical, word count, keyword density) using standard Unix tools. No unrelated credentials, binaries, or install steps are requested.
- Instruction Scope
- okSKILL.md instructs either running the bundled script on a URL or piping HTML into it. The script only reads stdin or fetches the specified URL and analyzes the HTML; it does not reference other files, environment variables, or external endpoints beyond fetching the given URL with curl.
- Install Mechanism
- okThere is no install spec and the functionality is provided by a plain Bash script included in the skill. No external downloads, package installs, or archive extraction are performed by the skill itself.
- Credentials
- okThe skill requires no environment variables, credentials, or config paths. It only uses standard CLI tools (curl, grep, sed, awk) which are documented in SKILL.md.
- Persistence & Privilege
- okThe skill does not request persistent/always-on presence, does not modify other skills or system-wide settings, and contains no autonomous installation logic.