SimilarWeb Analytics

Analyze websites and domains using SimilarWeb traffic data. Get traffic metrics, engagement stats, global rankings, traffic sources, and geographic distribut...

This skill appears to be a straightforward wrapper around a platform ApiClient for SimilarWeb endpoints and is internally consistent. Before installing, confirm (1) where the agent will write saved data (file paths, retention, and access controls), (2) how the ApiClient authenticates (platform-managed credentials or tokens) so you understand which credentials are used, and (3) any rate/credit implications for your SimilarWeb account or platform quota. If you’re uncomfortable with automatic file writes, ask for the skill to specify safe file locations or opt out of automatic persistence.

Type: OpenClaw Skill Name: similarweb-analytics Version: 1.0.0 The skill's core functionality for SimilarWeb analytics is benign. However, the `SKILL.md` contains a broad instruction to the AI agent: "Always save all retrieved data to files immediately." While the immediate context implies saving analytics results, this instruction lacks specificity regarding *where* to save the data. This constitutes a prompt injection vulnerability, as a less constrained or vulnerable agent could interpret this as a directive to write data to arbitrary or sensitive locations, potentially leading to unintended data exposure or file system abuse if the agent's environment is not strictly sandboxed. There is no clear evidence of intentional malicious behavior like exfiltration to external servers or installation of backdoors, classifying it as suspicious due to a risky capability rather than outright malicious intent.