Web Scraper Pro

网页数据爬虫 - 数据抓取、表格导出、定时采集

This skill appears to do what it says (scrape pages, export tables), but there are a few red flags to check before installing or running it: - Verify the 'clawhub' CLI: SKILL.md expects a 'clawhub' command. The README's 'npx clawhub@latest install web-scraper-pro' would download code from npm — only run that if you trust the package owner and have inspected the package contents. - Confirm the dependency mismatch: _meta.json lists 'curl' while registry metadata lists none; ensure required binaries are present and legitimate. - Ask where data goes: clarify whether scraped data/images are stored locally or uploaded to a cloud service (and which endpoint). If cloud upload or paid 'Pro' features are used, check for required credentials and privacy policies. - Be cautious with scheduling: scheduling commands may persist jobs; verify whether scheduling runs locally or registers jobs on a remote service. - If you plan to run this on sensitive systems or with sensitive pages, first test in a sandbox and inspect any installed code (npm package or clawhub CLI) for unexpected network calls or credential use. If the publisher or source cannot be verified, treat the README 'npx' install instruction as the primary risk and avoid running it without code review.

Type: OpenClaw Skill Name: xiaoming-web-scraper Version: 1.1.0 The skill bundle contains only metadata and documentation (SKILL.md, README.md) for a web scraping utility. It describes standard features such as data fetching, table export, and task scheduling without any executable code or instructions that suggest malicious intent, data exfiltration, or prompt injection.