B12 Website Generator

This skill allows you to create a professional, engaging, and user-friendly website in seconds using AI. To create a website, you need to provide a name for...

This skill is coherent with its purpose: it only asks for a business name and description and returns a formatted B12 signup URL. Before installing, consider: 1) Privacy — the business description is placed verbatim into a URL query string (GET parameter), which may be logged by b12.io or intermediaries. Do not provide passwords, credit card numbers, private PII, or secrets in the description. 2) Clarification limits — the skill explicitly forbids asking users for structure/style preferences; if you want the agent to collect more detailed requirements via follow-up questions, this skill's instructions constrain that behavior. 3) Source/ownership — the skill's source and homepage are unknown; if you rely on this for production workflows, verify the publisher or use an official integration from B12. If these points are acceptable, the skill appears safe and proportionate to install.

Type: OpenClaw Skill Name: website-generator Version: 1.0.0 The skill takes arbitrary user input for 'business_name' and 'business_description', explicitly instructing the agent to append any 'volunteered information' to the description. This user-controlled, potentially extended, input is then URL-escaped and embedded directly into a signup link for an external service (b12.io) in SKILL.md. While the skill itself does not exhibit malicious intent, this pattern creates a significant vulnerability risk for the downstream b12.io service, as it processes user-supplied data that could be crafted for injection attacks (e.g., SQL injection, XSS) if b12.io does not adequately sanitize or validate these parameters on its end. The skill acts as a conduit for potential user-initiated attacks against a third-party service.