Scrapling OpenClaw Plugin
Security checks across malware telemetry and agentic risk
Overview
The plugin's code, README and runtime instructions are coherent with a web-scraping plugin that shells out to a local Python 'scrapling' CLI and writes crawl output to disk; nothing requests unrelated secrets or installs arbitrary remote binaries, but you must trust the external 'scrapling' Python package you install.
This plugin is internally consistent with its stated purpose, but it relies on an external Python package ('scrapling') and optional Playwright browser binaries that you must install — those are the real trust boundary. Before installing or enabling: 1) Review the 'scrapling' package source (or only install it from a trusted index) because the plugin will invoke that code via python and it can execute arbitrary Python logic. 2) Run the plugin in a sandbox/container or with restricted filesystem access if you don't fully trust the package. 3) Be aware the plugin will access external websites and write files (output_dir or /tmp); limit output location and monitor disk usage. 4) Follow robots.txt and legal rules when crawling sites. 5) If you plan to crawl authenticated or sensitive targets, do not reuse credentials; the plugin does not request secrets but may be combined with other tools. If any of these concerns worry you, inspect/verify the installed 'scrapling' package and test in an isolated environment first.
SkillSpector
SkillSpector findings are pending for this release.
VirusTotal
No VirusTotal findings