productivity-design

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This instruction-only skill is a coherent productivity-guide integration that directs the agent to fetch and recommend public ProductivityHub pages, with no code, install steps, credentials, or persistence requested.

Safe to install for productivity guidance. Expect it to recommend and optionally fetch public pages from productivity.design; avoid sharing sensitive personal or workplace details with external tools unless you intend to.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may retrieve current public content from productivity.design and recommend related links to the user.

Why it was flagged

The skill directs the agent to use a web-fetch tool, but only for specific public ProductivityHub pages and in line with the skill's stated purpose.

Skill content
When the user needs the latest tools, new articles, or current site structure, use mcp_web_fetch to fetch: https://www.productivity.design ...
Recommendation

This is reasonable for the skill's purpose; users should simply be aware that the agent may contact the external ProductivityHub website when current information is needed.