Dead Link Scanner

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This appears to be a straightforward dead-link checker, with the main thing to notice being that it makes outbound web requests to links it finds.

This skill looks safe for normal link-checking use. Before running it, remember that it will contact links found in websites or files, so use the provided scoping options for large, private, or untrusted inputs.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Scanning an untrusted page or private document may cause your machine to contact external URLs found there, exposing normal request metadata such as your IP address and user agent.

Why it was flagged

The scanner validates links by making outbound HTTP requests, falling back from HEAD to GET when needed. This is expected for a dead-link scanner, but it means scanned pages or files can cause requests to many discovered URLs.

Skill content
req = urllib.request.Request(url, method="HEAD", headers={"User-Agent": USER_AGENT}); resp = urllib.request.urlopen(req, timeout=timeout) ... method="GET"
Recommendation

Use --internal-only, --max-urls, --depth, and --delay when appropriate, and avoid scanning untrusted or sensitive documents if you do not want their links contacted.