Scrappa MCP

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Anyone using the skill will configure an API key that may be used for Scrappa requests and account quota.

Why it was flagged

The skill requires a Scrappa API key for access. This is purpose-aligned, but it gives the agent access to a credential-backed third-party service and should be noticed before installation.

Skill content
Sign up for a free account at https://scrappa.co/dashboard/register and get your API key ... --headers "X-API-KEY=YOUR_API_KEY"
Recommendation

Use a dedicated Scrappa key if possible, keep the local config file private, and revoke or rotate the key if you stop using the skill.

What this means

Queries sent through these tools may be visible to Scrappa’s service and processed outside the local agent environment.

Why it was flagged

The skill connects Clawdbot to an external MCP server. This is the core purpose of the skill, but user prompts, search terms, and returned data may cross that service boundary.

Skill content
"baseUrl": "https://scrappa.co/mcp", "headers": { "X-API-KEY": "your_api_key_here" }
Recommendation

Avoid sending secrets, private documents, or sensitive personal data as search queries unless you are comfortable with Scrappa processing them.

What this means

Search results, comments, reviews, and profile data could contain misleading or adversarial text that influences the agent’s reasoning.

Why it was flagged

The skill imports third-party web and review content into the agent context. That is expected for a search/scraping tool, but such content should be treated as untrusted.

Skill content
Search Google News articles ... Fetch video comments ... Fetch company reviews ... Get LinkedIn profile data
Recommendation

Treat retrieved web content as untrusted source material and ask the agent to cite or verify important claims before acting on them.

What this means

The agent may be able to perform many kinds of external searches once the MCP server is configured.

Why it was flagged

The MCP tool surface is broad. The documented tools appear read/search-oriented and purpose-aligned, but users should understand that enabling the skill gives the agent access to many external lookup tools.

Skill content
Access 80+ tools for searching Google, YouTube, Amazon, LinkedIn, Trustpilot, business reviews, flights, hotels, real estate, and more
Recommendation

Install only if you want broad external search/scraping capabilities, and give explicit instructions about when these tools should or should not be used.