Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward link-preview helper that checks public page metadata through getwowlink and guides small, relevant code edits.
Install only if you are comfortable using getwowlink for link-preview checks. Use it on public pages or staging pages safe to share, and review any generated meta-tag edits before deployment.
The listed trigger phrases include generic everyday requests such as "check my previews" and "add OG images" without defining clear boundaries for when this skill should or should not activate. In a markdown skill description, this can make invocation overly broad because the phrases are not constrained by explicit exclusions or a narrow activation context.
The hardcoded external endpoint normalizes third-party transmission as part of the workflow, with no safeguards around sensitive targets or confidential parameters embedded in URLs. In context, the skill is meant for website preview checking, which makes the behavior understandable, but still risky if applied to non-public pages or internal environments.
Without it, use the public API:
curl -s -X POST https://api.getwowlink.com/tools/og-check -H 'content-type: application/json' -d '{"url":"example.com/page"}'
or open https://www.getwowlink.com/og-checker?url=<page> for the visual report.
The hardcoded external endpoint normalizes third-party transmission as part of the workflow, with no safeguards around sensitive targets or confidential parameters embedded in URLs. In context, the skill is meant for website preview checking, which makes the behavior understandable, but still risky if applied to non-public pages or internal environments.
Without it, use the public API:
curl -s -X POST https://api.getwowlink.com/tools/og-check -H 'content-type: application/json' -d '{"url":"example.com/page"}'
or open https://www.getwowlink.com/og-checker?url=<page> for the visual report.
No suspicious patterns detected.