← Back to Skills Marketplace
488
Downloads
1
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install maxun
Description
List and run Maxun web scraping robots. Use when asked to list robots, run a robot, scrape a website, or get robot results.
Usage Guidance
This skill appears to do exactly what it claims: call the Maxun API to list and run scraping robots using your MAXUN_API_KEY. Before installing, confirm you trust the Maxun service and use a least-privilege API key. Be aware the included helper will source a local .env file if present (so don't keep unrelated secrets in that file for the working directory) and it sends your API key in an x-api-key header to app.maxun.dev (or a custom MAXUN_BASE_URL if set). If you need to limit exposure, create an API key scoped only for the operations the skill requires and avoid placing other sensitive credentials in the same .env or working directory.
Capability Analysis
Type: OpenClaw Skill
Name: maxun
Version: 1.0.2
The skill provides a functional integration for the Maxun web scraping platform but contains a code injection vulnerability. In `scripts/maxun.sh`, the `list` command interpolates the `$LIMIT` shell variable directly into a Python script executed via `python3 -c`, allowing for arbitrary Python code execution if the argument is manipulated. While `SKILL.md` instructs the AI not to append arguments to this command, the script itself lacks input sanitization. Furthermore, the setup instructions recommend disabling execution confirmations (`ask: off`), which increases the potential impact of this vulnerability.
Capability Assessment
Purpose & Capability
Name/description, required binary list (bash, curl, optional python3), and the single required env var (MAXUN_API_KEY) match the declared purpose of calling the Maxun SDK/API to list/run robots.
Instruction Scope
The SKILL.md instructs the agent to call exec with exact commands like 'maxun list' that will run the included shell helper; the helper makes authenticated HTTPS API calls to app.maxun.dev and prints results. Two minor points: the helper will source a local .env file if present (it can therefore read local environment files), and the script references an optional MAXUN_BASE_URL (not listed in requires.env). These are functional conveniences but worth noting because they allow the script to pick up local secrets/config from .env.
Install Mechanism
No external install or download is performed by the skill (instruction-only with an included script). No network downloads or archive extraction are present in the install metadata.
Credentials
The skill asks only for a single service-specific credential (MAXUN_API_KEY) which is appropriate for calling the Maxun API. It does read an optional MAXUN_BASE_URL and will source a local .env if present; these are reasonable but callers should be aware the script will read .env files in its working directory.
Persistence & Privilege
always is false and the skill does not request elevated or persistent platform privileges. Autonomous invocation is allowed (platform default) but not combined with any broad credential access beyond the single API key.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install maxun - After installation, invoke the skill by name or use
/maxun - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.2
- Support for self-hosted instances
v1.0.1
Initial release with git version control files:
- Added git repository structure and versioning files
- Established commit hooks and logging
- No changes to the maxun skill interface or usage instructions
- Internal setup only; user-facing functionality remains unchanged
v1.0.0
maxun 1.0.0 initial release
- Introduces the ability to list, run, and retrieve results from Maxun web scraping robots.
- Provides direct commands for all main actions: list robots, run robots, check past runs, fetch results, and abort runs.
- Includes error handling for missing robots and ongoing runs.
- Setup instructions are provided for cloud and self-hosted configurations.
Metadata
Frequently Asked Questions
What is Maxun?
List and run Maxun web scraping robots. Use when asked to list robots, run a robot, scrape a website, or get robot results. It is an AI Agent Skill for Claude Code / OpenClaw, with 488 downloads so far.
How do I install Maxun?
Run "/install maxun" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Maxun free?
Yes, Maxun is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Maxun support?
Maxun is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Maxun?
It is built and maintained by Rohit (@rohitr311); the current version is v1.0.2.
More Skills