Bright Data
v1.0.0Web scraping and search via Bright Data API. Requires BRIGHTDATA_API_KEY and BRIGHTDATA_UNLOCKER_ZONE. Use for scraping any webpage as markdown (bypassing bot detection/CAPTCHA) or searching Google with structured results.
⭐ 1· 2.7k·14 current·15 all-time
by@meirkad
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
The SKILL.md and the included scripts clearly require BRIGHTDATA_API_KEY and BRIGHTDATA_UNLOCKER_ZONE and perform Bright Data API requests — that is coherent with the stated purpose. However the registry metadata lists no required env vars or primary credential, which is inconsistent and misleading (the API key should be declared as the primary credential).
Instruction Scope
The instructions and scripts are narrowly scoped: they build a Bright Data request and POST to https://api.brightdata.com/request, then output parsed JSON or markdown. The scripts do not reference unrelated files, system configuration, or external endpoints other than Bright Data. Note: they will send arbitrary target URLs (and the fetched page contents as applicable) to Bright Data — a privacy/data-exposure consideration.
Install Mechanism
There is no install spec (instruction-only with two included shell scripts). No third-party packages are downloaded or installed by the skill itself, which minimizes installation risk.
Credentials
The skill needs two environment variables (BRIGHTDATA_API_KEY and BRIGHTDATA_UNLOCKER_ZONE) which are appropriate for Bright Data integration, but the registry metadata fails to declare them or a primary credential. The scripts also implicitly require curl and jq to be present on PATH, but the manifest does not list required binaries — another mismatch that could mislead users about prerequisites.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system-wide settings, and has normal autonomous-invocation defaults. No persistent elevated privileges are requested.
What to consider before installing
What to check before installing:
- Confirm the publisher/owner (source/homepage is missing). If you don't trust the owner, don't install.
- The SKILL.md and scripts require BRIGHTDATA_API_KEY and BRIGHTDATA_UNLOCKER_ZONE; the registry metadata did not declare these — ask the publisher to correct the metadata so you know what secrets you'll be asked for.
- Ensure you intend to give Bright Data an API key: any URL you ask the skill to scrape will be sent to Bright Data and they will receive the page content — this may expose private URLs or sensitive data and will incur usage charges. Use a limited-scope or expendable key if possible, and monitor usage/billing.
- The scripts require curl and jq on PATH but the manifest didn't list them; verify you have these binaries or the scripts will fail.
- If you need stronger isolation, run the skill in a network-isolated environment or with restricted credentials. Consider asking the publisher for a version that documents required binaries/credentials and includes a homepage or source link.Like a lobster shell, security has layers — review code before you run it.
latestvk97fr2hzzeyzg2bxpcd3n7q4ch7z13yp
License
MIT-0
Free to use, modify, and redistribute. No attribution required.