Cn Url Health Checker

PassAudited by ClawScan on May 14, 2026.

Overview

This skill is a simple, purpose-aligned URL checker that makes a network request to a user-supplied URL and does not show credential use, persistence, or hidden behavior.

This appears safe for its stated purpose. Be aware that it sends a request from your environment to the URL you provide, so avoid testing private/internal URLs unless you intend to expose that network request. No credentials should be needed.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Checking a URL may reveal your IP address or network location to that site, and supplied internal URLs could be reached from your machine.

Why it was flagged

The script makes a network request to a user-supplied URL. This is expected for a URL health checker, but users should understand the request is made from their environment.

Skill content
parser.add_argument("--url", required=True) ... urllib.request.urlopen(req, timeout=10)
Recommendation

Use the skill only with URLs you intend to test, especially if they are private or internal network addresses.

What this means

There is no artifact evidence that this skill actually reads or requires credentials, but the metadata signal is inconsistent.

Why it was flagged

The supplied capability signal is inconsistent with the declared requirements and code: it flags sensitive credentials, while the skill states and implements no API key or credential use.

Skill content
Capability signals: requires-sensitive-credentials; Required env vars: none; Primary credential: none
Recommendation

Do not provide credentials for this skill unless a future version clearly documents why they are needed.