Scrapeless LLM Chat Scraper Skill
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Anyone using the skill must provide an API token, so misuse or exposure of that token could affect the user's Scrapeless account or billing.
The skill requires a Scrapeless API token, which gives the skill authenticated authority to create and retrieve Scrapeless scraper tasks.
credentials:
- X_API_TOKEN
env:
required:
- X_API_TOKENUse a token intended for this integration, store it securely, monitor usage, and rotate it if it may have been exposed.
Prompts, country/mode settings, and resulting task data may be processed by Scrapeless, so confidential prompts could be shared with a third party.
The script sends the user's prompt and options to the Scrapeless API, which is expected for this skill but means the data leaves the local environment.
self.api_base_url = 'https://api.scrapeless.com' ... 'prompt': prompt, 'country': country ... response = requests.post(..., json=payload, timeout=30)
Avoid sending secrets or sensitive personal/business data unless you trust Scrapeless's handling, privacy, and retention practices.
Dependency behavior could vary over time depending on what versions are installed from the package index.
The dependency versions are lower-bound ranges rather than pinned exact versions, so future installs may resolve to newer package versions.
requests>=2.31.0 python-dotenv>=1.0.0
Install in a virtual environment and consider pinning or locking dependency versions for repeatable, lower-risk installs.