llms.txt File Builder

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Running the generator can send requests from your machine or agent environment to the target website and any followed redirects.

Why it was flagged

The generator makes outbound HTTP requests and follows redirects while analyzing pages, which is expected for building llms.txt from a website but is still a capability users should notice.

Skill content
resp = requests.get(url, timeout=self.timeout, allow_redirects=True)
Recommendation

Use it only for domains you intend to analyze, avoid untrusted or internal targets unless approved, and review generated URL lists/output before publishing.

What this means

You may need to install external Python packages before running the skill, which introduces ordinary package-provenance considerations.

Why it was flagged

The script directs users to install unpinned third-party Python packages if dependencies are missing; this is common for a Python utility but is not captured in an install spec.

Skill content
print("Error: Install dependencies: pip install requests beautifulsoup4")
Recommendation

Install dependencies from trusted sources, preferably in a virtual environment, and pin versions if you need reproducible or controlled deployments.