smart-web-scraper

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). This URL points to an untrusted GitHub repository by an obscure user hosting a third‑party "skill" (installed via npx/clawhub), which is not an official vendor release and could deliver arbitrary code—making it potentially suspicious.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill “smart-web-scraper” is designed to extract structured data from arbitrary web pages, so at runtime it can ingest outsider-authored free text from public web content fetched/scraped via user-supplied URLs into the agent’s LLM context.