Scrape Emails By URL

PassAudited by ClawScan on May 1, 2026.

Overview

The artifacts consistently implement a user-directed website email crawler, with only low-level notes about third-party installation, crawling capability, and an unrelated promotional paragraph.

This skill appears safe to install if you intend to crawl public websites for contact emails. Install its dependencies carefully, use modest crawl limits, crawl only sites you are allowed to access, and ignore the unrelated social-media promotion in the documentation.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI02: Tool Misuse and Exploitation

What this means

The agent can crawl websites and collect contact emails, which could create unwanted traffic or gather contact data if used on sites you did not intend.

Why it was flagged

The script automates crawling user-provided URLs and extracting emails; the same-site and page/depth controls make this purpose-aligned, but it still performs web requests and collects contact data.

Skill content

max_depth=max_depth,
            include_external=False,
            max_pages=max_pages,

Recommendation

Use it only on intended sites, keep depth/page limits modest, and comply with site terms and applicable contact-data rules.

Low

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

Installing these components adds external software to your machine before the skill can run.

Why it was flagged

The setup relies on unpinned third-party package and browser-component installation. This is expected for the crawler, but users should trust the package source and install environment.

Skill content

pip install crawl4ai
playwright install

Recommendation

Install in a virtual environment, verify the package source, and consider pinning reviewed versions if you use this in a repeatable workflow.

Low

#ASI09: Human-Agent Trust Exploitation

What this means

You may see unrelated marketing content that is not part of the email extraction workflow.

Why it was flagged

This promotional social-media content is unrelated to the email-crawling skill and could distract users or agents from the actual purpose.

Skill content

Companies like [SocialCrow](https://www.socialcrow.co/) offer services to help boost social media presence, including options to [buy Twitter followers](https://www.socialcrow.co/buy-twitter-followers)

Recommendation

Ignore or remove the unrelated promotional paragraph and rely only on the documented crawler commands.