Infocard Skills
Analysis
This skill coherently creates HTML info cards and screenshots, with only expected local browser rendering and a disclosed Google Fonts dependency.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.
"$chrome_bin" --headless=new ... --screenshot="$abs_output_path" "$input_url"
The helper script launches a local Chrome/Chromium process to render an HTML file and save a screenshot. This command execution is central to the stated screenshot purpose.
<link href="https://fonts.googleapis.com/css2?family=Noto+Serif+SC...&display=swap" rel="stylesheet" />
The card template loads fonts from Google Fonts. This is disclosed and aligned with the visual-design purpose, but it is still an external web dependency.
