Webpage Screenshot

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Running the command may execute whatever screenshot script exists in the current project and may create or overwrite a screenshot file.

Why it was flagged

The skill's recommended screenshot method relies on executing a local npm script. This is aligned with the screenshot purpose, but users should confirm what the local script does before running it.

Skill content
npm run screenshot -- <URL> [输出路径]
Recommendation

Before using this method, inspect the project's package script and choose an output path that will not overwrite important files.

What this means

The user may need to install npm dependencies and a Chromium browser package before screenshots work.

Why it was flagged

The skill documents package installation and a browser download as prerequisites, while the provided package is instruction-only. This is common for Playwright-based screenshots, but the installed dependencies are outside the reviewed artifact content.

Skill content
前置条件:已执行 `npm install` 且已安装浏览器:`npx playwright install chromium`。
Recommendation

Only run installation commands in a trusted project environment and review the package source before installing dependencies.