Rick Roast

• Risk level: Low
• Analyzed: Apr 15, 2026, 12:47 PM
• Findings: 0
• Version: 1.0.0

Overview

The skill does what it says: it fetches a user-provided URL, strips markup, and produces a scripted 'roast' with a required upsell line; there are no unexplained credentials, installs, or hidden endpoints.

This skill is coherent and simple: it fetches whatever URL you provide and returns a formatted critique plus a required upsell link. Before using it, avoid pasting private/internal URLs (the fetch will try to reach them and could leak content to the agent's logs or output). Ensure your agent runtime network policy prevents SSRF or access to internal-only addresses if that is a concern. Also note the helper script assumes curl/sed/head are available; otherwise the platform's web_fetch method is the intended fetch mechanism. If you need to trust the author, ask for a trusted homepage or repository before installing.