PLS Website Audit

Perform comprehensive website health checks covering performance, broken links, security headers, accessibility, and SEO issues.

This skill appears coherent for performing website audits. Before running it, be aware that: (1) the scripts and commands will make network requests to the target site and may recursively crawl links — only audit sites you own or have permission to test; (2) npx and pip commands in the instructions will download and execute third‑party packages at runtime — review those packages or run the skill in a sandboxed environment if you have supply-chain concerns; (3) no credentials are requested, so the skill cannot access protected resources unless you explicitly provide credentials later. If you need stricter controls, ask the publisher for an explicit install spec with vetted package versions or run the provided scripts in an isolated VM/container.

Type: OpenClaw Skill Name: pls-audit-website Version: 1.0.0 The skill bundle is designed for legitimate website auditing, utilizing various command-line tools (curl, wget, openssl) and Python scripts (requests, BeautifulSoup). However, it is classified as suspicious due to its reliance on dynamic package installation via `pip install LinkChecker` and `npx` for tools like Lighthouse and axe-cli. While these actions are necessary for the stated purpose, they introduce a significant supply chain risk, as the agent can fetch and execute arbitrary code from external package repositories. There is no evidence of intentional malicious behavior like data exfiltration or unauthorized system modification within the provided code or instructions in `SKILL.md`.