contact-page-generator

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This is an instruction-only contact page helper with one minor, clearly scoped local context read for brand voice.

This skill appears safe and purpose-aligned. Before installing, just be aware that it may read `.claude/project-context.md` or `.cursor/project-context.md` if present, so those files should not contain secrets or sensitive private information.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI06: Memory and Context Poisoning
Info
What this means

The agent may use existing project context to shape the wording and recommendations it gives for a contact page.

Why it was flagged

The skill may incorporate persistent local project context into its contact-page guidance. This is bounded and purpose-aligned, but users should ensure those files do not contain secrets or misleading instructions.

Skill content
If `.claude/project-context.md` or `.cursor/project-context.md` exists, read it for brand voice.
Recommendation

Keep project-context files limited to non-sensitive brand and project guidance, and avoid storing credentials or private data there.