Scrapling Safe

Scrapling 安全技能 - 网页数据抓取工具 支持 HTTP 请求、隐身抓取、浏览器自动化 智能元素定位，抗反爬虫检测 无需 API 配置，路径输出受限

This skill appears to do what it says (scraping public sites) and doesn't ask for unrelated secrets. Before installing/using it you should: 1) verify the 'scrapling' package on PyPI or its source repository (ensure it's the legitimate project and inspect its install scripts); 2) be cautious when installing browser drivers or helper tools (they may download binaries); 3) run initially in a sandbox or isolated environment; 4) ensure you have legal authorization to scrape a target site and respect robots.txt and terms of service; and 5) if you rely on the output-path restriction, test that the tool cannot be tricked into writing outside your home directory (e.g., via symlinks or path traversal). If you need higher assurance, request the upstream source repository and provenance for the 'scrapling' package and any installer scripts.

Type: OpenClaw Skill Name: scrapling-safe Version: 1.0.0 The 'scrapling-safe' skill is a legitimate web scraping tool built on the Scrapling framework. It implements proactive security measures, including a path validation function in `scrapling.py` that restricts file output to the user's home directory to prevent path traversal. The code avoids dangerous execution functions like `eval()` or `exec()`, and the instructions in `SKILL.md` are strictly aligned with its stated purpose of public data extraction without any signs of prompt injection or malicious intent.