Back to skill
v1.0.0

Web Scraper Seller

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 8:06 AM.

Analysis

This is an instruction-only commercial web-scraping service listing with no code or credential requests, but its broad scraping and ongoing-monitoring offers should be scoped carefully.

GuidanceNo code runs at install and no credentials are requested. If you use this service, verify the provider and make sure any scraping is authorized, narrowly scoped, rate-limited, and has clear data retention and shutdown rules.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Tool Misuse and Exploitation
SeverityLowConfidenceHighStatusNote
SKILL.md
I build custom web scrapers for any website. ... Unlimited items ... Full website scraping

The service is openly about scraping, but the advertised target and volume are broad and do not include authorization, rate-limit, or data-minimization boundaries.

User impactA user could unintentionally ask for scraping that exceeds website terms, privacy expectations, or the intended data scope.
RecommendationUse only on authorized targets, specify allowed pages and fields, set rate limits, and avoid collecting personal or sensitive data unless you have a clear legal basis.
Rogue Agents
SeverityLowConfidenceHighStatusNote
SKILL.md
Scheduled updates ... Real-time monitoring ... Auto-updates

These features imply ongoing automation or monitoring, which is disclosed and purpose-aligned but should have clear stop conditions and ownership.

User impactA commissioned scraper or monitor could continue collecting data beyond the initial task if schedules and shutdown controls are not defined.
RecommendationBefore use, define update frequency, retention, notification, API destinations, and a clear way to pause or stop ongoing automation.