← Back to Skills Marketplace
kirkraman

scrape

by KirkRaman · GitHub ↗ · v1.0.1 · MIT-0
cross-platform ⚠ suspicious
128
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install jx-scrape
Description
Legal web scraping with robots.txt compliance, rate limiting, and GDPR/CCPA-aware data handling. Supports both direct HTTP scraping and managed scraping via...
README (SKILL.md)

Pre-Scrape Compliance Checklist

Before writing any scraping code:

  1. robots.txt — Fetch {domain}/robots.txt, check if target path is disallowed. If yes, stop.
  2. Terms of Service — Check /terms, /tos, /legal. Explicit scraping prohibition = need permission.
  3. Data type — Public factual data (prices, listings) is safer. Personal data triggers GDPR/CCPA.
  4. Authentication — Data behind login is off-limits without authorization. Never scrape protected content.
  5. API available? — If site offers an API, use it. Always. Scraping when API exists often violates ToS.

Legal Boundaries

  • Public data, no login — Generally legal (hiQ v. LinkedIn 2022)
  • Bypassing barriers — CFAA violation risk (Van Buren v. US 2021)
  • Ignoring robots.txt — Gray area, often breaches ToS (Meta v. Bright Data 2024)
  • Personal data without consent — GDPR/CCPA violation
  • Republishing copyrighted content — Copyright infringement

Request Discipline

  • Rate limit: Minimum 2-3 seconds between requests. Faster = server strain = legal exposure.
  • User-Agent: Real browser string + contact email: Mozilla/5.0 ... (contact: [email protected])
  • Respect 429: Exponential backoff. Ignoring 429s shows intent to harm.
  • Session reuse: Keep connections open to reduce server load.

Data Handling

  • Strip PII immediately — Don't collect names, emails, phones unless legally justified.
  • No fingerprinting — Don't combine data to identify individuals indirectly.
  • Minimize storage — Cache only what you need, delete what you don't.
  • Audit trail — Log what, when, where. Evidence of good faith if challenged.

SkillBoss API Hub Scraping

For managed content extraction with automatic anti-bot handling, use SkillBoss API Hub's scraping capability (type: "scraper"). Authenticate with SKILLBOSS_API_KEY and call https://api.skillbossai.com/v1/pilot. Result is returned at result.data.markdown.

For code patterns, robots.txt parser, and SkillBoss API Hub scraping integration, see code.md

Usage Guidance
Before installing: (1) Ask the publisher to correct the registry metadata to declare SKILLBOSS_API_KEY if the managed-scraping path is required, or explicitly state that the API key is optional. (2) Verify the SkillBoss API host (https://api.skillbossai.com) and the operator's trustworthiness — the API key grants that external service access to any scraped content you send. (3) If you must use this skill, supply a scoped, revocable API key and avoid sending raw PII to the external API; prefer local/direct scraping code when dealing with sensitive data. (4) Test the skill in a sandboxed environment and review logs to ensure no unexpected endpoints receive scraped data. (5) If the publisher cannot clarify the env/metadata mismatch or the SkillBoss operator, treat the skill with caution or avoid installing.
Capability Analysis
Type: OpenClaw Skill Name: jx-scrape Version: 1.0.1 The jx-scrape skill bundle provides a well-documented framework for ethical web scraping, emphasizing robots.txt compliance, rate limiting, and GDPR/CCPA awareness. The code in code.md implements standard best practices such as exponential backoff, jitter, and session management, while integrating with the SkillBoss API Hub (api.skillbossai.com) for managed extraction. No malicious patterns, data exfiltration, or prompt-injection risks were identified.
Capability Tags
requires-sensitive-credentials
Capability Assessment
Purpose & Capability
Name, description, and runtime instructions match: the skill provides polite/legal scraping patterns and an optional managed-scraping path via a SkillBoss API. However the registry metadata lists no required env vars while SKILL.md and code.md explicitly require SKILLBOSS_API_KEY — an inconsistency that should be resolved (either the env should be declared or the docs updated to make the API optional).
Instruction Scope
SKILL.md and code.md limit actions to fetching robots.txt, site pages, ToS, and using an external API; they prescribe rate limits, PII-stripping, backoff, and audit logging. There is no instruction to read local files, other env vars, or system state outside the declared scraping flow. The only external network targets are site domains being scraped and api.skillbossai.com (for managed scraping).
Install Mechanism
Instruction-only skill with no install spec and no binaries to fetch or write to disk. Lowest install risk.
Credentials
SKILL.md and code.md require SKILLBOSS_API_KEY (os.environ usage and HTTP Authorization header to api.skillbossai.com), but the registry metadata lists no required env vars — this mismatch is a red flag. Requesting a single API key for an external scraping service is plausible, but the missing declaration and the unknown provenance of SkillBoss increase risk: that key would permit external API calls and potential data exfiltration to that service.
Persistence & Privilege
The skill does not request persistent presence or elevated platform privileges (always:false). It does not modify other skills or system settings in the provided instructions.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install jx-scrape
  3. After installation, invoke the skill by name or use /jx-scrape
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
- Documentation update only: code.md file was changed in this release. - No changes were made to the SKILL.md or functional code.
v1.0.0
Scrape 1.0.0 — Initial release - Enables legal web scraping with strict robots.txt compliance and rate limiting. - Incorporates GDPR/CCPA-aware data handling, protecting personal information. - Supports both direct HTTP scraping and managed scraping via SkillBoss API Hub. - Provides a step-by-step pre-scrape compliance checklist and legal boundaries. - Guides for responsible request handling and best-practice data management.
Metadata
Slug jx-scrape
Version 1.0.1
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 2
Frequently Asked Questions

What is scrape?

Legal web scraping with robots.txt compliance, rate limiting, and GDPR/CCPA-aware data handling. Supports both direct HTTP scraping and managed scraping via... It is an AI Agent Skill for Claude Code / OpenClaw, with 128 downloads so far.

How do I install scrape?

Run "/install jx-scrape" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is scrape free?

Yes, scrape is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does scrape support?

scrape is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created scrape?

It is built and maintained by KirkRaman (@kirkraman); the current version is v1.0.1.

💬 Comments