E-commerce Data Scraper Pro
v1.0.0智能数据抓取工具 - 从网页/API 提取结构化数据，支持批量处理
⭐ 0· 33·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (web/API data scraper) match the included Python script, README, and SKILL.md instructions. Required capabilities (HTTP requests, HTML parsing, optional Excel/pandas support) align with the declared requirements.txt. Minor metadata inconsistencies exist (registry lists version 1.0.0 while SKILL.md/_meta.json indicate 0.1.0 and SKILL metadata/homepage fields differ), but this appears to be a publishing/versioning mismatch rather than a capability mismatch.
Instruction Scope
Runtime instructions and examples only tell the agent to run the included script, provide URLs or an URLs-file, and optionally supply auth/proxy/delay/schedule. The SKILL.md does not instruct reading system files beyond the specified URLs file or sending scraped data to unexpected external endpoints. It does accept runtime auth tokens and proxy URIs (expected for API access and proxied scraping).
Install Mechanism
No install spec is provided (instruction-only), and included requirements.txt lists typical Python libraries (requests, beautifulsoup4, pandas, openpyxl). Nothing is downloaded from arbitrary URLs or installed from untrusted hosts. The user will need to pip-install dependencies themselves.
Credentials
The skill does not request environment variables or credentials in its metadata. It accepts auth and proxy values at runtime via command-line arguments (reasonable for a scraper). No unrelated secrets are requested. Note: passing sensitive tokens on the command line can expose them via shell history — a usage risk, not an inherent incoherence.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. It contains no install-time hooks that modify other skills or global agent configuration. Autonomous invocation remains allowed (platform default) but is not combined with other red flags.
Assessment
This skill appears to be what it says: a local Python-based web/API scraper. Before installing or running it: 1) Inspect the script yourself (it’s included) and run it in a sandboxed environment first. 2) Install dependencies from trusted package indexes (pip) and prefer a virtualenv. 3) Avoid passing long-lived secrets on the command line (use environment vars or files with restricted permissions) because shell history can leak tokens. 4) Be mindful of legality and target site terms of service when scraping (robots.txt, rate limits, TOS). 5) Note small metadata inconsistencies (version/homepage) — ask the publisher for clarification if you need provenance before using in production.Like a lobster shell, security has layers — review code before you run it.
latestvk972mm3aez6277wyxs8r4mdhtn84363a
License
MIT-0
Free to use, modify, and redistribute. No attribution required.