Content Strategy Analyzer

Security checks across static analysis, malware telemetry, and agentic risk

Overview

The skill appears coherent for analyzing a user-provided website and generating an Excel content plan, with only normal setup, network, and file-output cautions.

Before installing, use a trusted Python environment, install dependencies carefully, and only provide URLs you intend the agent to fetch. Review generated JSON and Excel files before sharing them.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI02: Tool Misuse and Exploitation
Low
What this means

If a private, internal, or unintended URL is provided, the skill may request that address from the user's environment.

Why it was flagged

The crawler fetches a user-supplied URL. This is expected for the skill, but it means the agent can make network requests to whatever URL is provided.

Skill content
url = sys.argv[1] ... response = requests.get(url, headers=HEADERS, timeout=30)
Recommendation

Use the skill with intended public URLs, and confirm before analyzing private or internal sites.

#
ASI04: Agentic Supply Chain Vulnerabilities
Info
What this means

Package behavior can vary by version, and unpinned installs rely on the current package index state at install time.

Why it was flagged

The documented setup installs unpinned third-party Python packages. These packages are relevant to crawling and Excel generation, but their versions are not constrained.

Skill content
pip install requests beautifulsoup4 openpyxl
Recommendation

Install dependencies in a virtual environment and consider pinning trusted package versions before use.