Create a Self-Selling Website
PassAudited by ClawScan on May 1, 2026.
Overview
The skill is a coherent EvoWeb integration, but it will use your EvoWeb API key to send business details to an external service and generate a website.
This appears reasonable to install if you intend to use EvoWeb. Protect the API key, review the business prompt before generation when accuracy or confidentiality matters, and assume submitted details may be processed externally and published in the generated website.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The assistant can use the configured EvoWeb key to create and manage website generation tasks, which may affect the user's EvoWeb account or credits.
The skill requires an EvoWeb API key and instructs authenticated API calls. This is expected for creating sites in the user's EvoWeb account, but it is still account-level credential use.
requires ... env: ["EVOWEB_API_KEY"] ... Include this header in all requests: Access-Token: your-api-key-here
Use a dedicated or least-privileged API key if available, keep it out of chats/logs, and revoke it if you stop using the skill.
A user request can result in a generated website and possible account credit usage before the user reviews the exact enhanced prompt.
The skill directs the assistant to call external API endpoints that create or remake a website. This is purpose-aligned and bounded, but it is still a mutating action.
Call `POST /sites` with the enhanced prompt. ... Call `GET /sites/{site_id}` ... `POST` `/sites/{site_id}/remake`Before using it for important business content, ask the assistant to show the final prompt and confirm expected cost/publication behavior.
Business descriptions, value propositions, target audiences, and other submitted details may be processed by EvoWeb and reflected in a generated website.
The workflow sends the user's business description to EvoWeb's external API. This is disclosed and central to the skill's purpose, but users should understand the data leaves the assistant environment.
API Base URL: `https://api.evoweb.ai/openapi/api/v1` ... Request Body: { "prompt": "A local coffee shop..." }Do not include confidential business information unless you are comfortable sending it to EvoWeb and potentially publishing it in the generated site.