Robots.txt Generator

• Risk level: Low
• Analyzed: May 1, 2026, 7:08 AM
• Findings: 1
• Version: 1.0.0

Overview

This appears to be a straightforward robots.txt generator and validator with disclosed, purpose-aligned file and URL handling.

This skill looks safe for normal robots.txt work. Before installing or using it, be aware that it can read a file you point it at, fetch a robots.txt URL you provide, and write to an output file you choose.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI02: Tool Misuse and Exploitation

Low

What this means

A user or agent should confirm the input file, remote URL, and output path before running the command.

Why it was flagged

The CLI accepts user-controlled file paths, URLs, and output paths. This is disclosed and central to the robots.txt workflow, but it can still read the wrong local file, contact an unintended URL, or overwrite a chosen output file if used carelessly.

Skill content

`--file <path>` — Local file to validate. `--url <url>` — Remote robots.txt URL to fetch and validate. `--output <file>` — Write to file instead of stdout.

Recommendation

Use the skill only with intended robots.txt files and known website URLs, and double-check the output path before writing a generated file.