Back to skill
v0.1.2

Infocard Skills

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 8:03 AM.

Analysis

This skill coherently creates HTML info cards and screenshots, with only expected local browser rendering and a disclosed Google Fonts dependency.

GuidanceThis appears safe for its stated purpose. Before installing, note that screenshot capture runs a local Chrome/Chromium process on HTML files you provide, and the default template imports fonts from Google Fonts.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Unexpected Code Execution
SeverityLowConfidenceHighStatusNote
scripts/capture_card.sh
"$chrome_bin" --headless=new ... --screenshot="$abs_output_path" "$input_url"

The helper script launches a local Chrome/Chromium process to render an HTML file and save a screenshot. This command execution is central to the stated screenshot purpose.

User impactUsing the screenshot feature runs a local browser against the selected HTML file and writes a PNG to the chosen output path.
RecommendationUse the capture script only with HTML files and output paths you intended to process.
Agentic Supply Chain Vulnerabilities
SeverityInfoConfidenceHighStatusNote
assets/card-template.html
<link href="https://fonts.googleapis.com/css2?family=Noto+Serif+SC...&display=swap" rel="stylesheet" />

The card template loads fonts from Google Fonts. This is disclosed and aligned with the visual-design purpose, but it is still an external web dependency.

User impactRendered cards may make a network request to Google Fonts unless the HTML is modified to use local fonts.
RecommendationIf offline use or avoiding external font requests matters, replace the Google Fonts import with local or system fonts.