Back to plugin
Pluginv0.1.0
ClawScan security
Top NY Web Design Tool · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 14, 2026, 5:56 AM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is a tiny, instruction-only bundle whose files are a simple static HTML backlink and a minimal config — its requirements and contents match its stated purpose.
- Guidance
- This skill appears to be just a static HTML snippet linking to topnewyorkwebdesign.com and poses low technical risk (no credentials, no install, no code execution). Before installing, consider whether you trust the publisher (no homepage/source listed), whether the single outbound link is acceptable for your use case, and avoid granting any unrelated credentials. If you need provenance, ask the publisher for a homepage or source repository before using it. If you don't need a simple backlink snippet, it's safe to skip.
Review Dimensions
- Purpose & Capability
- okName/description, included index.html, and config.json all align: this is effectively a static backlink/webpage snippet and does not request unrelated capabilities.
- Instruction Scope
- okSKILL.md contains only a title/identifier and the included files are static; there are no runtime instructions to read system files, access credentials, or transmit data.
- Install Mechanism
- okNo install spec and no code to execute — instruction-only with static assets, which is low-risk for installation behavior.
- Credentials
- okNo environment variables, credentials, or config paths are requested; nothing disproportionate to the stated purpose is required.
- Persistence & Privilege
- okSkill does not request persistent/always-enabled behavior and contains no code to modify agent settings or other skills.