facequet

PassAudited by VirusTotal on May 11, 2026.

Overview

Type: OpenClaw Skill Name: facenot Version: 1.0.0 The skill is a straightforward web scraper designed to extract text from a provided URL using the requests and BeautifulSoup libraries. The code in scripts/skill.py follows standard practices for HTML parsing, and the manifest.json correctly identifies the need for network permissions without requesting excessive access or demonstrating any malicious intent such as data exfiltration or command injection.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Using the skill sends a request to the supplied website and returns extracted page text; only provide URLs you intend the agent to access.

Why it was flagged

The skill makes an outbound HTTP request to a user-provided URL. This is expected for a web reader, but users should recognize that it can contact arbitrary sites, not only Facebook.

Skill content
parser.add_argument("--url", required=True, help="URL trang cần đọc") ... r = requests.get(url, headers=DEFAULT_HEADERS, timeout=12)
Recommendation

Keep use user-directed, avoid sensitive/internal URLs, and consider adding domain allowlisting if the skill is intended to read only Facebook pages.

What this means

If dependencies are installed from this file, the exact versions may vary between installations.

Why it was flagged

The dependency names are listed without pinned versions. These are common, purpose-aligned libraries, but unpinned installs can change over time.

Skill content
requests
beautifulsoup4
Recommendation

Pin dependency versions or use a lockfile for reproducible installs.