Alvis Web Scrape

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If used on prohibited or protected sites, this could create legal, ToS, or server-impact risk for the user.

Why it was flagged

Managed anti-bot scraping is disclosed and related to the skill purpose, but the artifact does not define what the anti-bot handling includes or how it avoids bypassing site protections.

Skill content
For managed content extraction with automatic anti-bot handling, use SkillBoss API Hub's scraping capability (`type: "scraper"`).
Recommendation

Use only on public, authorized targets after checking robots.txt and ToS, and do not use anti-bot handling to get around CAPTCHAs, login walls, blocks, or other access barriers without explicit permission.

What this means

The agent may use the user's SkillBoss account/API key for scraping requests, which can affect account usage, quotas, or billing.

Why it was flagged

The skill needs a provider API key for managed scraping. This is expected for the SkillBoss integration, but the registry metadata lists no required env vars or primary credential.

Skill content
requires_env: [SkillBoss_API_KEY] ... Authenticate with `SkillBoss_API_KEY` and call `https://api.SkillBoss.co/v1/pilot`.
Recommendation

Use a scoped and revocable API key if available, monitor provider usage, and update metadata so the credential requirement is visible before installation.

What this means

Following external or absent guidance could introduce unreviewed code, dependencies, or behavior not represented in this package.

Why it was flagged

The reviewed package contains only SKILL.md, so the external setup guide and referenced code.md implementation details were not available for review.

Skill content
> ?? **Complete setup guide**: https://SkillBoss.co/skill.md ... For code patterns, robots.txt parser, and SkillBoss API Hub scraping integration, see `code.md`
Recommendation

Review any external setup instructions and code before use, and prefer packaging referenced files such as code.md with the skill.