URL Preview
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
What this means
Shared links may be fetched by the agent/tool so the site could receive a request before the user personally visits it.
Why it was flagged
The skill directs the agent to automatically call a web extraction tool on user-shared URLs. This is purpose-aligned for URL previews, but users should know it causes an external web fetch.
Skill content
When a user shares a URL, automatically extract and display a preview card... Use `extract_content_from_websites` tool to fetch the page
Recommendation
Use it for public HTTP/HTTPS links as intended, and avoid previewing sensitive, private, or internal URLs unless you are comfortable with the tool fetching them.