Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Web Automation & Browser Workflows

Automate web tasks like form filling, data scraping, and UI testing using Apify's cloud browser automation via a simple REST API.

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 1k · 15 current installs · 16 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The described capability (cloud browser automation via Apify) matches the instructions and example API usage. However, the registry metadata declares no required credentials while the SKILL.md explicitly instructs the user to set an AUTOMATION_TOKEN — a transparency mismatch.
Instruction Scope
SKILL.md confines actions to calling Apify REST APIs and uploading a pageFunction to run in the cloud. It does not instruct reading unrelated local files or other env vars. Note: the pageFunction mechanism allows running arbitrary JS on remote browsers and automating logins/clicks, so any sensitive data you include in task inputs will be transmitted to Apify.
Install Mechanism
Instruction-only skill with no install spec and no code written to disk — low install risk.
!
Credentials
SKILL.md requires storing a Personal API Token in AUTOMATION_TOKEN, but the skill metadata lists no required env vars or primary credential. The token is appropriate for the service, but the omission in metadata reduces transparency and could lead users to unknowingly expose credentials to the agent or external service.
Persistence & Privilege
always is false and autonomous invocation is default; the skill does not request elevated or persistent system privileges and does not modify other skill configs.
What to consider before installing
This skill will send your automation jobs (including any page scripts and input data) to apify.com and requires your Apify Personal API Token (AUTOMATION_TOKEN). Before installing: (1) confirm the skill metadata is updated to declare the required env var (AUTOMATION_TOKEN) so you know what will be stored/shared; (2) review Apify's privacy and security docs and consider using a scoped or throwaway token if you'll automate logins or handle secrets; (3) avoid embedding passwords, credit cards, or other secrets in task inputs sent to the cloud; (4) verify the skill owner/source (none is listed here); and (5) if you prefer not to transmit data externally, run browser automation locally or with self-hosted tooling instead. If you proceed, rotate the token if you stop using the skill.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
latestvk974vrrpy0w0nhrdy6hk3pp3e1826yag

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Web Automation & Browser Workflows

Overview

Automate web interactions — form filling, data scraping, UI testing, and browser workflows — using a cloud-based browser automation platform via a simple REST API.

🔗 Start automating for free (includes $5/month compute): https://www.apify.com/?fpr=dx06p


Setup (2 minutes)

  1. Create a free account via the link above
  2. Go to Settings → Integrations and copy your Personal API Token
  3. Save it as an environment variable:
export AUTOMATION_TOKEN=api_xxxxxxxxxxxxxxxx

How It Works

Describe a web task in plain language and Claude will:

  1. Pick the right automation actor for the job
  2. Build and fire the API call
  3. Return results or a confirmation

API Quick Reference

Base URL: https://api.apify.com/v2
Auth header: Authorization: Bearer YOUR_TOKEN

ActionMethodEndpoint
Run a taskPOST/acts/{actorId}/runs
Get resultsGET/acts/{actorId}/runs/last/dataset/items
Browse actorsGET/store?search=your-query

Common Automation Actors

ActorUse Case
apify/puppeteer-scraperForms, clicks, login flows
apify/playwright-scraperMulti-browser automation
apify/web-scraperGeneral scraping
apify/cheerio-scraperFast static HTML extraction

Example — Fill & Submit a Form

const response = await fetch(
  "https://api.apify.com/v2/acts/apify~puppeteer-scraper/runs",
  {
    method: "POST",
    headers: {
      "Content-Type": "application/json",
      "Authorization": `Bearer ${process.env.AUTOMATION_TOKEN}`
    },
    body: JSON.stringify({
      startUrls: [{ url: "https://example.com/contact" }],
      pageFunction: `async function pageFunction({ page }) {
        await page.waitForSelector('#name');
        await page.type('#name', 'Jane Smith');
        await page.type('#email', 'jane@example.com');
        await page.click('button[type="submit"]');
        await page.waitForNavigation();
        return { success: true };
      }`
    })
  }
);
const data = await response.json();
console.log("Run ID:", data.data.id);

Tips

  • Use waitForSelector() before touching any element
  • Use waitForNavigation() after form submissions
  • Set maxRequestRetries: 3 for unstable pages
  • Use page.screenshot() to debug issues

Requirements

Files

1 total
Select a file
Select a file to preview.

Comments

Loading comments…