Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

SimilarWeb Analytics

v1.0.0

Analyze websites and domains using SimilarWeb traffic data. Get traffic metrics, engagement stats, global rankings, traffic sources, and geographic distribut...

0· 498·2 current·3 all-time
byWells Wu@wells1137
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description match the implementation: SKILL.md shows calls to an ApiClient for endpoints named 'SimilarWeb/...', which is exactly what a SimilarWeb analytics wrapper would do. No unrelated services, binaries, or credentials are requested.
Instruction Scope
Instructions only call the platform ApiClient (from /opt/.manus/.sandbox-runtime) and describe expected query params and endpoints — staying within the stated purpose. One caveat: the doc instructs the agent to "Always save all retrieved data to files immediately," but provides no guidance on file locations, retention, or access controls; that persistent storage behavior is within scope but worth confirming policy/locations.
Install Mechanism
Instruction-only skill with no install spec and no code files — lowest-risk delivery model. The runtime relies on an existing platform ApiClient rather than downloading external code.
Credentials
No environment variables or credentials are declared, which is consistent for a wrapper that uses an existing internal ApiClient. However, the skill doesn't document authentication: the ApiClient likely uses platform-side credentials or tokens not shown here. Users should confirm how the ApiClient is authenticated and whether any platform credentials are used on their behalf.
Persistence & Privilege
always:false (normal). The only persistence-related instruction is to save all API results to files to avoid data loss; this is reasonable for reliability but increases the chance sensitive or bulk data is written to disk. The skill does not request elevated system privileges or modify other skills.
Assessment
This skill appears to be a straightforward wrapper around a platform ApiClient for SimilarWeb endpoints and is internally consistent. Before installing, confirm (1) where the agent will write saved data (file paths, retention, and access controls), (2) how the ApiClient authenticates (platform-managed credentials or tokens) so you understand which credentials are used, and (3) any rate/credit implications for your SimilarWeb account or platform quota. If you’re uncomfortable with automatic file writes, ask for the skill to specify safe file locations or opt out of automatic persistence.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

📊 Clawdis
latestvk97bht4kz72fzmzg9ghmtn3k5d81vdbd
498downloads
0stars
1versions
Updated 6h ago
v1.0.0
MIT-0

SimilarWeb Analytics

Comprehensive website and domain analysis using SimilarWeb traffic data.

Core Capabilities

  • Traffic Analysis: Total visits, unique visitors, traffic trends
  • Engagement Metrics: Bounce rate, pages per visit, average visit duration
  • Global Ranking: Website ranking over time
  • Traffic Sources: Marketing channels (desktop and mobile)
  • Geographic Distribution: Traffic breakdown by country

API Usage

All APIs use ApiClient from /opt/.manus/.sandbox-runtime. Common parameters:

  • domain: Website domain (e.g., "google.com")
  • start_date: Start date (YYYY-MM). Max 12 months ago
  • end_date: End date (YYYY-MM). Max 12 months ago, default is 1 month ago (most recent complete month)
  • main_domain_only: Exclude subdomains if True (default: False)

Default time ranges vary by API:

  • Global Rank, Visits Total, Unique Visit, Bounce Rate: default 6 months
  • Traffic Sources (Desktop/Mobile), Traffic by Country: default 3 months

Get Global Rank

import sys
sys.path.append('/opt/.manus/.sandbox-runtime')
from data_api import ApiClient

client = ApiClient()
result = client.call_api('SimilarWeb/get_global_rank', path_params={'domain': 'amazon.com'})

Get Website Visits Total

import sys
sys.path.append('/opt/.manus/.sandbox-runtime')
from data_api import ApiClient

client = ApiClient()
result = client.call_api('SimilarWeb/get_visits_total',
    path_params={'domain': 'amazon.com'},
    query={'country': 'world', 'granularity': 'monthly', 'start_date': '2025-07', 'end_date': '2025-12'})

Get Unique Visit

import sys
sys.path.append('/opt/.manus/.sandbox-runtime')
from data_api import ApiClient

client = ApiClient()
result = client.call_api('SimilarWeb/get_unique_visit',
    path_params={'domain': 'amazon.com'},
    query={'start_date': '2025-07', 'end_date': '2025-12'})

Get Bounce Rate

import sys
sys.path.append('/opt/.manus/.sandbox-runtime')
from data_api import ApiClient

client = ApiClient()
result = client.call_api('SimilarWeb/get_bounce_rate',
    path_params={'domain': 'amazon.com'},
    query={'country': 'world', 'granularity': 'monthly', 'start_date': '2025-07', 'end_date': '2025-12'})

Get Traffic Sources - Desktop

Returns breakdown by channel: Organic Search, Paid Search, Direct, Display Ads, Email, Referrals, Social Media.

import sys
sys.path.append('/opt/.manus/.sandbox-runtime')
from data_api import ApiClient

client = ApiClient()
result = client.call_api('SimilarWeb/get_traffic_sources_desktop',
    path_params={'domain': 'amazon.com'},
    query={'country': 'world', 'granularity': 'monthly', 'start_date': '2025-07', 'end_date': '2025-12'})

Get Traffic Sources - Mobile

import sys
sys.path.append('/opt/.manus/.sandbox-runtime')
from data_api import ApiClient

client = ApiClient()
result = client.call_api('SimilarWeb/get_traffic_sources_mobile',
    path_params={'domain': 'amazon.com'},
    query={'country': 'world', 'granularity': 'monthly', 'start_date': '2025-07', 'end_date': '2025-12'})

Get Total Traffic by Country

Returns traffic share, visits, pages per visit, average time, bounce rate and rank by country.

  • limit: Number of countries to return (default: 1, max: 10)
  • Date range limit: max 3 months (unlike other APIs)
import sys
sys.path.append('/opt/.manus/.sandbox-runtime')
from data_api import ApiClient

client = ApiClient()
result = client.call_api('SimilarWeb/get_total_traffic_by_country',
    path_params={'domain': 'amazon.com'},
    query={'start_date': '2025-10', 'end_date': '2025-12', 'limit': '10'})

When to Use

Invoke APIs when users mention:

  • Domain names: "google.com", "amazon.com"
  • Traffic queries: "traffic", "visits", "visitors"
  • Ranking queries: "rank", "ranking", "how popular"
  • Engagement queries: "bounce rate", "engagement"
  • Source queries: "traffic sources", "marketing channels"
  • Geographic queries: "countries", "geographic"
  • Comparison queries: "compare", "vs"

Data Limitations

  • Historical data: max 12 months
  • Geography: worldwide only
  • Granularity: monthly only
  • Latest data: last complete month

Important: Save Data to Files

API calls may fail mid-execution due to credit depletion. Always save all retrieved data to files immediately to avoid data loss and prevent redundant API calls.

Comments

Loading comments...