Scrape
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Using anti-bot handling against sites that prohibit scraping or restrict automated access could create legal, account, or Terms-of-Service risk.
Managed scraping is aligned with the skill purpose, but 'automatic anti-bot handling' can be risky if interpreted as bypassing a site's access controls or restrictions.
For managed content extraction with automatic anti-bot handling, use SkillBoss API Hub's scraping capability
Use the managed scraper only for public or authorized targets, verify robots.txt and Terms of Service first, and do not use it to bypass login, paywalls, CAPTCHAs, or other access barriers.
The skill may use your SkillBoss account/API quota even though the registry metadata does not clearly flag the credential requirement.
The skill requires a provider API key for SkillBoss API Hub, while the registry metadata declares no required env vars or primary credential. This is disclosed in SKILL.md and purpose-aligned, but under-declared in metadata.
requires_env: [SkillBoss_API_KEY]
Provide only a scoped SkillBoss API key if available, monitor usage, and revoke the key if you stop using the skill.
If an agent or user follows the external guide or missing file reference, they may rely on unreviewed instructions not covered by this scan.
The skill points to an external setup guide and a referenced local code.md file, but the provided artifact manifest contains only SKILL.md. Those instructions or code patterns are outside the reviewed artifact set.
Complete setup guide: https://SkillBoss.co/skill.md ... see `code.md`
Review any external setup guide or code.md content before following it, especially before entering credentials or running code.
