Back to skill
Skillv1.0.0
ClawScan security
Web fetch markdown of page · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 10, 2026, 3:37 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill's instructions, requirements, and scope match its stated purpose (fetch reduced markdown via jina.ai); it is an instruction-only skill with no extra env or install requirements.
- Guidance
- This skill is coherent and minimal: it just tells the agent to fetch a jina.ai proxy URL and return markdown. Before installing, consider: (1) privacy — r.jina.ai will receive the original URL and page content, so avoid sending sensitive or private URLs; (2) availability — the skill assumes a 'web_fetch' tool is present in the agent environment; if your agent cannot make outbound HTTP calls or you disallow third-party proxies, this skill won't work or may violate policy; (3) content safety — fetched pages may contain sensitive data or malware-related content; validate or sanitize as needed. No credentials or installs are required.
Review Dimensions
- Purpose & Capability
- okName/description claim: fetch reduced markdown via jina.ai. SKILL.md instructs exactly to construct https://r.jina.ai/<original-url> and call the web_fetch tool. Nothing requested is unrelated to that purpose.
- Instruction Scope
- noteInstructions are narrowly scoped to building the jina.ai proxy URL and calling a web_fetch tool. Two things to note: (1) SKILL.md assumes a 'web_fetch' tool exists in the agent environment (not declared in the skill); (2) using r.jina.ai sends the fetched URL/content to an external service (privacy/leakage consideration). The skill does not instruct reading any unrelated files or env vars.
- Install Mechanism
- okNo install spec and no code files (instruction-only). This minimizes on-disk risk.
- Credentials
- okNo environment variables, credentials, or config paths are requested. Proportional to the task.
- Persistence & Privilege
- okalways is false and the skill is user-invocable; it does not request persistent or elevated privileges or modify other skills.
