ClawHub

Form Cro

v1.0.0

When the user wants to optimize any form that is NOT signup/registration — including lead capture forms, contact forms, demo request forms, application forms...

⭐ 0· 98·0 current·0 all-time
byMario Karras@mariokarras
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name, description, and full SKILL.md are coherent: all guidance relates to optimizing non-signup forms. The skill does not request unrelated binaries, credentials, or installs.
ℹ
Instruction Scope
SKILL.md instructs the agent to read .agents/product-marketing-context.md (or .claude/...) if present before asking questions. That is relevant to tailoring advice but does grant the agent permission to read a local context file — acceptable for the task but something to be aware of if that file contains sensitive data.
✓
Install Mechanism
No install spec and no code files — instruction-only. This minimizes on-disk risk; nothing is downloaded or executed.
✓
Credentials
The skill requires no environment variables, credentials, or config paths. SKILL.md mentions optional enrichment services (e.g., Clearbit) only as suggestions and does not request keys.
✓
Persistence & Privilege
No always:true, no special privileges, and the skill is user-invocable only. It does not request to modify other skills or agent-wide config.
Scan Findings in Context
[no_regex_findings] expected: The regex-based scanner had no code files to analyze; this is expected for an instruction-only skill. The included evals/evals.json is a test spec and not a code-scan finding.
Assessment
This skill appears coherent and low-risk: it only contains best-practice instructions and asks for no credentials or installs. Before installing, check whether you store any sensitive data in .agents/product-marketing-context.md or .claude/product-marketing-context.md — the skill explicitly reads those files if present. Also be cautious about following any recommendations that suggest third-party enrichment (e.g., Clearbit): do not provide API keys to the skill and only integrate such services through your vetted systems. Finally, if you expect signup/registration workflows, use the dedicated signup-flow-cro skill as the SKILL.md suggests.

Like a lobster shell, security has layers — review code before you run it.

latestvk972yzaxvamt8352gwjwryanxn834yyw

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments