Tabstack Extractor

Extract structured data from websites using Tabstack API. Use when you need to scrape job listings, news articles, product pages, or any structured web content. Provides JSON schema-based extraction and clean markdown conversion. Requires TABSTACK_API_KEY environment variable.

What to check before installing: - Confirm the TABSTACK_API_KEY requirement: the SKILL.md and both included wrappers require TABSTACK_API_KEY, but the registry metadata doesn't list it. Only provide an API key from a trusted Tabstack account and give it the minimum scope required. - Inspect missing files: the docs instruct running bb scripts/tabstack.clj, but tabstack.clj is not present in the bundle. Ask the publisher why the referenced Babashka script is missing or obtain the correct bundle before running commands. - Avoid running curl | bash blindly: the quick-start suggests installing Babashka via a curl-based install script. Prefer installing Babashka from your OS package manager or review the install script first. - Review the shipped scripts yourself: the provided Python and bash wrappers post only to https://api.tabstack.ai/v1 and read local schema files; verify there are no hidden endpoints or credential leaks before use. - Test with non-sensitive URLs/data first and verify network traffic (or run in an isolated environment) to ensure behavior matches expectations. Confidence notes: assessment is medium confidence because the code present matches the stated purpose, but the missing referenced script and registry metadata mismatch are unresolved ambiguities. If the publisher provides the missing tabstack.clj or updates registry metadata to declare TABSTACK_API_KEY, this would reduce concern.

Type: OpenClaw Skill Name: tabstack-extractor Version: 0.1.0 The skill's core functionality for web scraping via the Tabstack API appears benign, utilizing `api.tabstack.ai` as intended. However, the `SKILL.md` file contains a highly risky installation instruction for Babashka (`curl -s https://raw.githubusercontent.com/babashka/babashka/master/install | bash`). This method of executing remote scripts directly without integrity checks introduces a significant supply chain risk, as it could lead to arbitrary code execution if the remote script is compromised, making the skill suspicious.