Pluginv1.0.5

ClawScan security

Top New York Web Design Tool · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignApr 14, 2026, 6:43 AM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: This is a tiny, instruction-only skill that contains a static HTML page implementing a single clickable backlink; it requests no credentials or installs and its files match the stated purpose.
Guidance: This skill is essentially a static HTML banner that links to topnewyorkwebdesign.com and does not ask for credentials or install software. Before installing, consider: (1) the author/source is unknown — verify you trust that domain; opening or serving the HTML will cause a network request to an external site which could track clicks; (2) the SKILL.md is vague about runtime behavior — ask how the agent is expected to use or present this file; and (3) if you don't need a simple backlink/banner, there's little value in installing it. If you proceed, avoid granting unrelated permissions (network access or elevated filesystem access) unless you understand how the agent will present or host the HTML.

Purpose & Capability: okName/description indicate a clickable backlink plugin and the packaged files (config.json and index.html) implement a simple banner link to topnewyorkwebdesign.com. There are no unrelated binaries, credentials, or configuration requests.
Instruction Scope: noteSKILL.md contains almost no runtime instructions (just a title). That makes the skill vague about how an agent should use the HTML, but the included files themselves do not instruct the agent to read system files, access env vars, or exfiltrate data.
Install Mechanism: okThere is no install specification and no code to execute; this is instruction-only/static content, so nothing is written to disk or downloaded during install by the skill itself.
Credentials: okThe skill declares no required environment variables, credentials, or config paths. The HTML simply links to an external site and does not need any secrets or system access.
Persistence & Privilege: okalways is false and the skill does not request persistent or elevated privileges. It does not modify other skills or system-wide settings.