Github Readme Maker

• Analyzed: May 11, 2026, 6:25 AM
• Findings: 0
• Version: 1.0.0
• Hash: 0cb6fde3c45f6ee0208fc6020c5710a3878bb995d7a2156e884ddfec788f8662
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: github-readme-maker Version: 1.0.0 The skill is a straightforward GitHub profile README generator that produces markdown templates and links to popular third-party visualization services (e.g., github-readme-stats, shields.io). The bash script (scripts/beautify_github_profile.sh) contains no network calls, file system modifications, or data exfiltration logic, and its behavior aligns perfectly with the documentation.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI07: Insecure Inter-Agent Communication

Note

What this means

If you publish the generated README, visitors' browsers or GitHub's rendering pipeline may load images from external badge and stats providers.

Why it was flagged

The script emits README markdown that references third-party badge/stat image services using the supplied username or text. This is purpose-aligned for profile README generation, but those services may receive page-load requests when the README is viewed.

Skill content

![Stats](https://github-readme-stats.vercel.app/api?username=$user&show_icons=true&theme=tokyonight)

Recommendation

Review the generated markdown before publishing and remove any external image links you do not want to rely on.