Media Crawler
v0.1.4基于 MediaCrawler 的多平台公开信息采集工具，支持安装、命令行运行、WebUI、结果定位与常用任务模板。
⭐ 1· 813·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name and description match the files and commands: the skill clones NanmiCoder/MediaCrawler, syncs dependencies, installs Playwright, and exposes run/web/result commands. Required artifacts (git, uv, Playwright) align with the stated purpose.
Instruction Scope
Runtime instructions and scripts operate within the expected scope (clone repo, uv sync, playwright install, run main.py, list data files). They do execute code from the cloned repository (uv run main.py) which is necessary for health checks and operation — this means upstream code will run on the host, so inspect the repo before running in sensitive environments.
Install Mechanism
No packaged install spec is included, but setup.sh may run a network-installed bootstrap: it pipes https://astral.sh/uv/install.sh into sh if uv is missing. Running a remote install script piped to sh is higher-risk than a vetted package; cloning from GitHub and running uv sync / uv run will also execute external code. These behaviors are coherent with installing/running a crawler but increase the attack surface.
Credentials
The skill does not request secrets or unrelated environment variables. It accepts PROJECT_PATH (default $HOME/MediaCrawler) which is appropriate and documented. No credentials or config paths outside the project are touched.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. It does not modify other skills or system-wide agent settings. It writes files under the project directory (data/), which is expected for a crawler.
Assessment
This skill clones and runs the upstream MediaCrawler project and may execute remote install scripts. Before installing: (1) review the GitHub repo (https://github.com/NanmiCoder/MediaCrawler) and its main.py / dependencies for any unexpected behavior; (2) avoid running setup.sh on a machine with sensitive data or credentials—use an isolated VM/container if possible; (3) note that setup.sh may run curl | sh to install 'uv' and will download Playwright/Chromium; (4) confirm your intended use is legal and complies with site terms of service. If you cannot review the upstream code, consider skipping installation or running only in a sandbox.Like a lobster shell, security has layers — review code before you run it.
latestvk979a1zv4rhze90gn2bse0bpx582q97a
License
MIT-0
Free to use, modify, and redistribute. No attribution required.