HTTP Status Checker & SSL Verifier
Security checks across static analysis, malware telemetry, and agentic risk
Overview
The skill's requests and instructions are consistent with its stated purpose (HTTP/SSL checking); it is an instruction-only skill and does not ask for unrelated credentials or installs, but it is vague about file access and network permissions so you should review runtime permissions before using it on sensitive targets.
This skill appears internally consistent and lightweight, but before installing consider the platform/runtime permissions: the agent will perform network requests and may read a file you point it at, so (1) avoid giving it files that contain secrets or credentials, (2) be careful when checking URLs you don't control (it can probe internal addresses like 127.0.0.1 or internal service endpoints), (3) confirm the agent is network-sandboxed or has an allowlist if you want to prevent SSRF/internal scanning, and (4) test first with non-sensitive public URLs and small batches to validate rate-limiting and behavior. If you need stronger guarantees, request the skill be modified to enforce an explicit input allowlist, disallow private IP ranges, or require explicit confirmation before reading local files.
SkillSpector
SkillSpector findings are pending for this release.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
No VirusTotal findings