Scrapeninja
v1.0.2ScrapeNinja integration. Manage Projects, Proxies, Users. Use when the user wants to interact with ScrapeNinja data.
⭐ 0· 126·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (ScrapeNinja integration) match the instructions: the document explains how to install and use the Membrane CLI to create a ScrapeNinja connection, list and run actions, and proxy requests. Required capabilities (network access, Membrane account) are appropriate.
Instruction Scope
Instructions are scoped to installing/using the Membrane CLI, authenticating via browser, discovering connectors/actions, running actions, and proxying API calls. The instructions do not ask the agent to read unrelated files, harvest local env vars, or exfiltrate data beyond requests to Membrane/ScrapeNinja.
Install Mechanism
There is no registry install spec, but the SKILL.md tells users to run `npm install -g @membranehq/cli` (or use `npx`). Installing a global npm package is a standard way to get the CLI but carries the usual npm risks (arbitrary code executed during install). Using `npx` reduces persistence. This is expected for a CLI-driven integration but users should verify the package source before global installation.
Credentials
The skill requests no environment variables or secrets and intentionally directs auth to the Membrane login flow (browser-based), which keeps API keys off the agent. The level of access requested is proportional to the described functionality. Note: the Membrane service will hold the ScrapeNinja credentials when you create a connection, so you are delegating those secrets to that service.
Persistence & Privilege
Skill is instruction-only and not always-on. The Membrane CLI will create local config/state during login (normal for a CLI). The skill does not request elevated platform privileges or modify other skills' settings. The skill can be invoked autonomously by the agent (platform default) — this is expected and not by itself a problem.
Assessment
This skill appears coherent and uses Membrane as an intermediary for ScrapeNinja access. Before installing/using it: (1) prefer running commands with `npx` instead of a global `npm install -g` if you want to avoid a permanent global install; (2) verify the @membranehq/cli package and the Membrane provider (homepage/repo) are legitimate and match your expectations; (3) understand that creating a connection delegates your ScrapeNinja credentials to the Membrane service — only proceed if you trust that service; (4) consider performing the setup in a controlled environment (e.g., VM or container) if you are concerned about installing third-party CLIs.Like a lobster shell, security has layers — review code before you run it.
latestvk97c9ngvdwtf517p1xvpsrd655843qs7
License
MIT-0
Free to use, modify, and redistribute. No attribution required.