Generate high-converting landing pages for products, services, and lead generation. Use when creating marketing pages, product launches, squeeze pages, or digital asset sales pages.
Security Analysis
high confidenceThe skill appears to do exactly what it says — locally generate HTML landing pages — with no unexpected network, credential, or install requirements; minor documentation mismatches are present.
The code and SKILL.md align with a landing-page generator: the included script (scripts/generate_landing.py) produces static HTML based on CLI parameters. One minor mismatch: SKILL.md documents additional helper scripts (optimize_copy.py, ab_test_variations.py) that are not present in the file manifest — this is a documentation/packaging inconsistency but not evidence of malicious behavior.
Runtime instructions tell the agent to run the provided Python script to produce an HTML file. The instructions do not ask the agent to read unrelated system files, access credentials, or transmit data to external endpoints. The only file I/O is writing the output HTML (path controlled by the --output argument).
No install spec is provided (instruction-only plus included script). Nothing is downloaded or written to system locations by an installer; risk from install mechanism is minimal.
The skill requires no environment variables, credentials, or config paths. The code does not read environment variables or secret files, so requested privileges are proportional to its purpose.
The skill does not request permanent/always-on presence (always:false) and does not modify other skills or system configuration. It behaves as a local CLI utility invoked by the agent.
Guidance
This skill is internally consistent with its stated purpose and appears safe to inspect and run locally. Before installing or running: (1) note that SKILL.md mentions additional scripts (optimize_copy.py, ab_test_variations.py) that are not included — if you need those features, request the missing files or a corrected package; (2) review any headline/benefit/testimonial text you pass into the generator — the script embeds input directly into HTML without sanitization, so avoid inserting untrusted HTML/JS (risk of producing pages with XSS if you host them); (3) run the script in a sandbox or review the generated HTML before publishing; and (4) verify the source/author since the package homepage is unknown. These are cautionary checks rather than indicators of malicious intent.
Latest Release
v1.0.0
Initial release: Generate high-converting landing pages with SEO optimization and responsive design
Popular Skills
Published by @Michael-laffin on ClawHub
