Scrappa MCP
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: scrappa-skill Version: 0.1.0 The skill bundle is designed to integrate the OpenClaw agent with the Scrappa Model Context Protocol (MCP) server for web scraping. The `SKILL.md` file provides clear instructions for obtaining an API key from `scrappa.co` and configuring the `mcporter` tool to use this key with the Scrappa API endpoint. All instructions and descriptions are directly related to enabling this functionality, and there is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the agent with a harmful objective. The network access and API key usage are explicitly for the stated purpose of interacting with the Scrappa service.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Anyone using the skill will configure an API key that may be used for Scrappa requests and account quota.
The skill requires a Scrappa API key for access. This is purpose-aligned, but it gives the agent access to a credential-backed third-party service and should be noticed before installation.
Sign up for a free account at https://scrappa.co/dashboard/register and get your API key ... --headers "X-API-KEY=YOUR_API_KEY"
Use a dedicated Scrappa key if possible, keep the local config file private, and revoke or rotate the key if you stop using the skill.
Queries sent through these tools may be visible to Scrappa’s service and processed outside the local agent environment.
The skill connects Clawdbot to an external MCP server. This is the core purpose of the skill, but user prompts, search terms, and returned data may cross that service boundary.
"baseUrl": "https://scrappa.co/mcp", "headers": { "X-API-KEY": "your_api_key_here" }Avoid sending secrets, private documents, or sensitive personal data as search queries unless you are comfortable with Scrappa processing them.
Search results, comments, reviews, and profile data could contain misleading or adversarial text that influences the agent’s reasoning.
The skill imports third-party web and review content into the agent context. That is expected for a search/scraping tool, but such content should be treated as untrusted.
Search Google News articles ... Fetch video comments ... Fetch company reviews ... Get LinkedIn profile data
Treat retrieved web content as untrusted source material and ask the agent to cite or verify important claims before acting on them.
The agent may be able to perform many kinds of external searches once the MCP server is configured.
The MCP tool surface is broad. The documented tools appear read/search-oriented and purpose-aligned, but users should understand that enabling the skill gives the agent access to many external lookup tools.
Access 80+ tools for searching Google, YouTube, Amazon, LinkedIn, Trustpilot, business reviews, flights, hotels, real estate, and more
Install only if you want broad external search/scraping capabilities, and give explicit instructions about when these tools should or should not be used.