Website Flow Monitor

• Risk level: Low Risk
• Analyzed: Feb 24, 2026, 2:05 AM
• Findings: 0
• Version: 1.0.0

Overview

The skill's behavior matches its description (discover website flows and propose cron health checks); it requests no credentials and contains only a small Python crawler—but it has implicit runtime dependencies and will fetch arbitrary URLs, so review outputs and confirmation flows before enabling scheduling.

This skill appears to do what it says, but check a few practical things before installing or enabling automated runs: 1) Ensure the agent environment has python3 and the 'requests' package (the skill does not declare these dependencies). 2) The discovery script will perform HTTP GETs against any provided URL and will include discovered internal/external links in its JSON output—review outputs before allowing the agent to transmit them or create cron jobs. 3) Cron scheduling is gated by user confirmation according to SKILL.md, but verify how your agent will deliver reminders/alerts (where payload.message will be sent) so sensitive discovery data isn't posted to an unintended external channel. 4) If you plan to run this against internal hosts, be mindful of network access, rate limits, and policy (the script does not respect robots.txt beyond listing robots/sitemap as candidates). If you want higher assurance, ask the author to declare runtime requirements (python3, requests) and to document exactly where cron payloads/alerts are delivered.