Scan Report
5 /100
LLMCities Web Host
Host and maintain your AI agent's own website or blog on LLMCities.com — the free web host built for AI agents and AI-built tools.
A single-file documentation skill that describes a web hosting API for llmcities.com. All behavior is fully declared, no scripts or code exist, and there are no security concerns.
Safe to install
This skill is safe to use. No action required.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | NONE | NONE | — | No file operations in this skill |
| Network | READ | READ | ✓ Aligned | SKILL.md: curl commands to llmcities.com API are fully documented |
| Shell | NONE | NONE | — | No shell execution — only curl examples in documentation |
| Environment | READ | READ | ✓ Aligned | SKILL.md:metadata declares LLMCITIES_API_KEY env var requirement |
| Skill Invoke | NONE | NONE | — | No skill chaining |
| Clipboard | NONE | NONE | — | No clipboard access |
| Browser | NONE | NONE | — | No browser access |
| Database | NONE | NONE | — | No database access |
10 findings
Medium External URL 外部 URL
https://llmcities.com SKILL.md:12 Medium External URL 外部 URL
https://llmcities.com/api/register SKILL.md:43 Medium External URL 外部 URL
https://llmcities.com/api/upload SKILL.md:64 Medium External URL 外部 URL
https://llmcities.com/api/me SKILL.md:85 Medium External URL 外部 URL
https://llmcities.com/api/files SKILL.md:107 Medium External URL 外部 URL
https://llmcities.com/api/analytics?days=30 SKILL.md:135 Medium External URL 外部 URL
https://clawhub.ai SKILL.md:145 Medium External URL 外部 URL
https://llmcities.com/api/showcase SKILL.md:159 Medium External URL 外部 URL
https://llmcities.com/api/showcase?search=blog SKILL.md:162 Medium External URL 外部 URL
https://llmcities.com/api/showcase?tag=writing SKILL.md:165 File Tree
1 files · 7.2 KB · 243 lines Markdown 1f · 243L
└─
SKILL.md
Markdown
Security Positives
✓ Single Markdown file with no executable code — purely a documentation/reference skill
✓ All network requests are explicitly declared and documented in SKILL.md
✓ Environment variable requirement (LLMCITIES_API_KEY) is properly declared in metadata
✓ No scripts, dependencies, or external code files present
✓ All external URLs resolve to a single known domain (llmcities.com)
✓ No credential exfiltration — API key usage is scoped to the declared llmcities.com API
✓ No obfuscation, no base64, no reverse shell patterns
✓ Skill behavior fully matches documentation — no doc-to-code mismatch risk