Httpstat
v1.0.0Pretty HTTP response statistics with timing waterfall. Use when asked to check a URL's response time, debug slow requests, measure TTFB, or get HTTP timing b...
⭐ 0· 55·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (HTTP timing waterfall) matches the included Python scripts and README. The files implement a raw-socket HTTP client that measures DNS, TCP, TLS, TTFB, transfer and prints a waterfall — appropriate for the stated purpose.
Instruction Scope
SKILL.md instructs running the provided script (python3 scripts/httpstat.py) and the examples match the script's CLI. The runtime instructions do not ask the agent to read unrelated files, env vars, or send data to external endpoints beyond the user-specified URL. Note: the tool will send any headers you provide (e.g., Authorization) to the requested URL, so supplying secrets in headers will transmit them as normal for an HTTP client.
Install Mechanism
No install spec (instruction-only + bundled scripts). Nothing is downloaded or written at install time. Risk is low.
Credentials
No environment variables, credentials, or config paths are requested. The declared requirements match the code (no secrets required).
Persistence & Privilege
always is false and the skill does not request persistent system privileges or modify other skills' configurations. Autonomous invocation is allowed by default but not accompanied by elevated privileges or broad credential access.
Assessment
This skill is internally consistent and implements a local Python HTTP timing tool. Before using it, note: (1) it will connect to whatever URL you (or an agent) supply — avoid pointing it at internal services or URLs that would expose sensitive endpoints unless you trust the request, and avoid passing secrets in headers unless intended; (2) there are two identical script copies (root and scripts/) — benign but redundant; (3) as with any tool that performs network requests, an autonomous agent using this skill could be instructed to probe hosts you wouldn’t want scanned, so only enable it for agents you trust.Like a lobster shell, security has layers — review code before you run it.
latestvk97bbr0vqe2e5gmfejny5w0h6s83qkfp
License
MIT-0
Free to use, modify, and redistribute. No attribution required.