ScrapingBee Fetch
v1.0.2Advanced JavaScript web page renderer using ScrapingBee API. Extracts main content and returns clean Markdown.
⭐ 0· 49·0 current·0 all-time
byFlo@flobo3
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (ScrapingBee renderer + Markdown extraction) match the code and runtime instructions. Minor inconsistency: the registry metadata at the top says "Required env vars: none", while SKILL.md and fetch.py require SCRAPINGBEE_API_KEY — the key is appropriate and needed for the declared purpose.
Instruction Scope
SKILL.md directs the agent to set SCRAPINGBEE_API_KEY and call the included fetch.py with URL and options. The script only reads .env (via python-dotenv), the SCRAPINGBEE_API_KEY env var, and sends requests to ScrapingBee's API endpoint; it does not read unrelated files or exfiltrate data to unexpected endpoints.
Install Mechanism
No install spec is provided (instruction-only + a bundled script). Dependencies are standard (requests, python-dotenv) and the script runs locally; no downloads from untrusted URLs or archive extraction are present.
Credentials
Only SCRAPINGBEE_API_KEY is required and the script enforces its presence — this is proportional. Note the inconsistency where registry metadata omitted this requirement while SKILL.md declares it; verify you supply a valid ScrapingBee key and store it safely (e.g., .env or process env).
Persistence & Privilege
always:false and no special privileges are requested. The skill does not attempt to modify other skills or system-wide settings.
Assessment
This skill appears to do exactly what it claims: it sends the target URL (and options) to ScrapingBee and prints the extracted title and text. Before installing, verify you trust ScrapingBee (requests to a third‑party service mean the target URL and scraped content will be sent to that service). Provide the SCRAPINGBEE_API_KEY only if you accept that use, and store it securely (avoid committing .env to version control). Note the small metadata mismatch: the registry summary omitted the required env var; confirm the presence and legitimacy of the API key and consider running the script in an isolated environment or sandbox for additional assurance. Also ensure your web scraping complies with the target sites' terms of service and applicable law.Like a lobster shell, security has layers — review code before you run it.
latestvk97fgjd580rg0wgy4np8nj3gzh83zbdg
License
MIT-0
Free to use, modify, and redistribute. No attribution required.