Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

url-structure

v1.1.0

When the user wants to optimize URL structure, fix URL issues, or plan URL hierarchy. Also use when the user mentions "URL structure," "URL optimization," "s...

0· 77·1 current·1 all-time
byKostja Zhang@kostja94

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for kostja94/url-structure.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "url-structure" (kostja94/url-structure) from ClawHub.
Skill page: https://clawhub.ai/kostja94/url-structure
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install url-structure

ClawHub CLI

Package manager switcher

npx clawhub@latest install url-structure
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name, description, and SKILL.md content all focus on URL structure and SEO best practices. There are no unrelated required binaries, environment variables, or install steps — the requested capabilities align with the stated purpose.
!
Instruction Scope
The runtime instructions explicitly tell the agent to 'read' project context files (.claude/project-context.md or .cursor/project-context.md) if they exist to gather site structure. That file access is reasonable for site-specific recommendations, but the SKILL.md references local project files that are not declared in the skill's metadata (required config paths). Any instruction that reads local files should be called out in the metadata so users know what will be accessed. Otherwise the instructions are scoped to URL analysis and related SEO tasks and do not direct data to external endpoints beyond included benign references.
Install Mechanism
Instruction-only skill with no install spec and no code files. This is the lowest-risk install mechanism — nothing is written to disk by an install step.
Credentials
The skill requests no environment variables, credentials, or external config paths in its metadata. However, the SKILL.md does instruct reading local project files for context. While these files are relevant to the skill's purpose, the access is not declared in requires.config or similar metadata, creating a minor proportionality/documentation mismatch.
Persistence & Privilege
always is false, the skill has no install step, and it does not request persistent system privileges or modify other skills or system-wide settings. Autonomous invocation (disable-model-invocation: false) is the platform default and is not in itself a new risk here.
What to consider before installing
This skill appears to do what it says — SEO-focused URL structure advice — and it does not require credentials or install anything. Before enabling it: (1) Inspect any local project-context files (.claude/project-context.md, .cursor/project-context.md) the skill would read and remove or sanitize sensitive data; (2) If you want explicit guarantees, ask the skill author to declare those config paths in the skill metadata so file access is transparent; (3) If you run agents on sensitive codebases, test the skill in a non-sensitive environment first; (4) Note the skill references other related skills (url-slug-generator, canonical-tag) — those are not installed automatically, so check how/when the agent will call them. If you are comfortable with the skill reading project-context files for tailored advice, the risk is low; if not, avoid installing or remove/sanitize those files first.

Like a lobster shell, security has layers — review code before you run it.

latestvk973aztjbm92eypm1348fd4xnh849ekq
77downloads
0stars
1versions
Updated 3w ago
v1.1.0
MIT-0

SEO On-Page: URL Structure

Guides URL structure optimization for SEO: readability, hierarchy, and best practices.

When invoking: On first use, if helpful, open with 1–2 sentences on what this skill covers and why it matters, then provide the main output. On subsequent use or when the user asks to skip, go directly to the main output.

Scope (On-Page SEO)

  • URL hierarchy: Path structure, categories, depth
  • URL format: Static vs dynamic; omit file extensions
  • URL slug: See url-slug-generator for slug creation (3–5 words, under 60 chars)
  • Duplicate variants: See canonical-tag for HTTPS, www, trailing slash

Initial Assessment

Check for project context first: If .claude/project-context.md or .cursor/project-context.md exists, read it for site structure.

Identify:

  1. Site structure: Categories, subcategories, content types
  2. Current URLs: Existing patterns and issues
  3. Multi-language: URL structure for zh/en (e.g., /zh/, /en/ or subdomains)

Best Practices

URL Guidelines

PrincipleGuideline
ReadableUse words, not IDs; /blog/seo-guide not /p/12345
ShortShorter is generally better; avoid unnecessary depth
KeywordInclude target keyword when natural
LowercaseUse lowercase; avoid mixed case
HyphensUse hyphens to separate words: seo-guide
AvoidSpecial chars, query params for core content, session IDs

Hierarchy

PatternExampleUse
Flat/page-nameSimple sites
Category/blog/post-name, /tools/tool-nameContent sites
Nested/category/subcategory/pageDeep hierarchies (keep shallow)

Multi-language

PatternExample
Path prefix/zh/page, /en/page
Subdomainzh.example.com, en.example.com
ccTLDexample.cn, example.com

Static vs Dynamic vs Pseudo-Static URLs

TypeExampleUse
Static/blog/seo-guideDirect file; best SEO; content stable
Dynamic/product?id=123Program-generated; avoid for indexable content
Pseudo-static/blog/seo-guide (rewritten from .php)Combines both; common in CMS
RulePrefer static or pseudo-static; if dynamic, keep params ≤2; use canonical-tag and robots-txt (Clean-param)

File Extensions

  • Omit .html, .php, .aspx — keeps URLs technology-agnostic, shorter, easier to refactor
  • Example: /seo-guide not /seo-guide.html

URL Parameter Handling

ScenarioApproach
UTM / trackingCanonical to base URL; params in query string only
Search resultsCanonical to search page; avoid indexing result URLs
Filters / sortCanonical to base; or robots-txt Clean-param
Session IDsUse cookies; never in indexable URLs

Use Cases

ScenarioFocus
New sitePlan hierarchy upfront; avoid later restructuring
Migration301 mapping; canonical; see canonical-tag
Large siteDynamic URLs, params, multi-language — canonical + robots
SEO auditCheck structure, params, canonical consistency

Common Issues

IssueFix
Long URLsShorten; remove redundant words
Dynamic paramsUse canonical; clean params in robots (Yandex Clean-param)
Mixed caseRedirect to lowercase
Changed URLs301 redirect old to new

Output Format

Related Skills

  • website-structure: Plan structure and URL paths; apply url-structure rules after structure is defined

  • canonical-tag: HTTPS, www, trailing slash — handles duplicate URL variants

  • url-slug-generator: Slug creation for content pages; length, keywords, format

  • category-page-generator: E-commerce category URL hierarchy, faceted URLs

  • products-page-generator: Product URL hierarchy

  • services-page-generator: Service URL hierarchy

  • robots-txt: Clean-param for query params

  • internal-links: URL structure affects link patterns

Comments

Loading comments...