ClawHub

core-web-vitals

v1.0.1

When the user wants to optimize Core Web Vitals, fix LCP, INP, or CLS issues. Also use when the user mentions "Core Web Vitals," "CWV," "LCP," "INP," "CLS,"...

⭐ 0· 68·1 current·1 all-time
byKostja Zhang@kostja94
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
Crypto
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description (CWV, LCP, INP, CLS optimization) match the SKILL.md content: diagnostic checks, prioritized fixes, and references to PageSpeed, DevTools, and GSC. No unrelated capabilities or credentials are requested.
ℹ
Instruction Scope
Runtime instructions are purely advisory and reference standard CWV tooling. The skill asks the agent to read `.claude/project-context.md` or `.cursor/project-context.md` if present to find a site URL; this is reasonable for getting context but does instruct the agent to read files in the workspace. It does not instruct the agent to exfiltrate data or call external endpoints beyond recommending standard public tools.
✓
Install Mechanism
No install spec and no code files — instruction-only skill. Nothing will be downloaded or written to disk by an installer.
✓
Credentials
The skill requires no environment variables, credentials, or config paths. It references using Google Search Console for CWV but does not demand GSC credentials itself; integration would be handled by a separate GSC skill or user-provided access.
✓
Persistence & Privilege
always:false and default autonomous invocation are reasonable for a helper skill. It does not request permanent system-wide privileges or modify other skills' configs.
Assessment
This skill is an advice-only CWV optimization guide and appears coherent and low-risk. It may read a project-context file (`.claude/project-context.md` or `.cursor/project-context.md`) if present to find the site URL — remove or sanitize those files if you don't want the skill to read them. The skill does not request credentials; if you want it to fetch field data from Google Search Console you'll need to provide access separately (e.g., via a dedicated google-search-console integration). If you prefer to restrict the agent's file access, adjust workspace permissions before invoking the skill.

Like a lobster shell, security has layers — review code before you run it.

latestvk979184qr5g9mtbzqbz2savkgh84avby

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments