← Back to Skills Marketplace
alxsharuk

HARPA AI

by Alex · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
759
Downloads
2
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install harpa-ai
Description
Automate web browsers, scrape pages, search the web, and run AI prompts on live websites via HARPA AI Grid REST API
README (SKILL.md)

\r \r

HARPA Grid — Browser Automation API\r

\r HARPA Grid lets you orchestrate real web browsers remotely. You can scrape pages, search the web, run built-in or custom AI commands, and send AI prompts with full page context — all through a single REST endpoint.\r \r

Prerequisites\r

\r The user must have:\r

  1. HARPA AI Chrome Extension installed from https://harpa.ai\r
  2. At least one active Node — a browser with HARPA running (configured in the extension's AUTOMATE tab)\r
  3. A HARPA API key — obtained from the HARPA extension AUTOMATE tab. The key is provided as the HARPA_API_KEY environment variable.\r \r If the user hasn't set up HARPA yet, direct them to: https://harpa.ai/grid/browser-automation-node-setup\r \r

API Reference\r

\r Endpoint: POST https://api.harpa.ai/api/v1/grid\r Auth: Authorization: Bearer $HARPA_API_KEY\r Content-Type: application/json\r \r Full reference: https://harpa.ai/grid/grid-rest-api-reference\r \r ---\r \r

Actions\r

\r

1. Scrape a Web Page\r

\r Extract full page content (as markdown) or specific elements via CSS/XPath/text selectors.\r \r Full page scrape:\r \r

curl -s -X POST https://api.harpa.ai/api/v1/grid \\r
  -H "Authorization: Bearer $HARPA_API_KEY" \\r
  -H "Content-Type: application/json" \\r
  -d '{\r
    "action": "scrape",\r
    "url": "https://example.com",\r
    "timeout": 15000\r
  }'\r
```\r
\r
**Targeted element scrape (grab):**\r
\r
```bash\r
curl -s -X POST https://api.harpa.ai/api/v1/grid \\r
  -H "Authorization: Bearer $HARPA_API_KEY" \\r
  -H "Content-Type: application/json" \\r
  -d '{\r
    "action": "scrape",\r
    "url": "https://example.com/products",\r
    "grab": [\r
      {\r
        "selector": ".product-title",\r
        "selectorType": "css",\r
        "at": "all",\r
        "take": "innerText",\r
        "label": "titles"\r
      },\r
      {\r
        "selector": ".product-price",\r
        "selectorType": "css",\r
        "at": "all",\r
        "take": "innerText",\r
        "label": "prices"\r
      }\r
    ],\r
    "timeout": 15000\r
  }'\r
```\r
\r
**Grab fields:**\r
\r
| Field | Required | Default | Values |\r
|-------|----------|---------|--------|\r
| selector | yes | — | CSS (`.class`, `#id`), XPath (`//h2`), or text content |\r
| selectorType | no | auto | `auto`, `css`, `xpath`, `text` |\r
| at | no | first | `all`, `first`, `last`, or a number |\r
| take | no | innerText | `innerText`, `textContent`, `innerHTML`, `outerHTML`, `href`, `value`, `id`, `className`, `attributes`, `styles`, `[attrName]`, `(styleName)` |\r
| label | no | data | Custom label for extracted data |\r
\r
### 2. Search the Web (SERP)\r
\r
Perform a web search. Supports operators like `site:`, `intitle:`.\r
\r
```bash\r
curl -s -X POST https://api.harpa.ai/api/v1/grid \\r
  -H "Authorization: Bearer $HARPA_API_KEY" \\r
  -H "Content-Type: application/json" \\r
  -d '{\r
    "action": "serp",\r
    "query": "OpenClaw AI agent framework",\r
    "timeout": 15000\r
  }'\r
```\r
\r
### 3. Run an AI Command\r
\r
Execute one of 100+ built-in HARPA commands or a custom automation on a target page.\r
\r
```bash\r
curl -s -X POST https://api.harpa.ai/api/v1/grid \\r
  -H "Authorization: Bearer $HARPA_API_KEY" \\r
  -H "Content-Type: application/json" \\r
  -d '{\r
    "action": "command",\r
    "url": "https://example.com/article",\r
    "name": "Extract data",\r
    "inputs": "List all headings with their word counts",\r
    "connection": "HARPA AI",\r
    "resultParam": "message",\r
    "timeout": 30000\r
  }'\r
```\r
\r
- `name` — command name (e.g. `"Summary"`, `"Extract data"`, or any custom command)\r
- `inputs` — pre-filled user inputs for multi-step commands\r
- `resultParam` — HARPA parameter to return as result (default: `"message"`)\r
- `connection` — AI model to use (e.g. `"HARPA AI"`, `"gpt-4o"`, `"claude-3.5-sonnet"`)\r
\r
### 4. Run an AI Prompt\r
\r
Send a custom AI prompt with page context. Use `{{page}}` to inject the page content.\r
\r
```bash\r
curl -s -X POST https://api.harpa.ai/api/v1/grid \\r
  -H "Authorization: Bearer $HARPA_API_KEY" \\r
  -H "Content-Type: application/json" \\r
  -d '{\r
    "action": "prompt",\r
    "url": "https://example.com",\r
    "prompt": "Analyze the current page and extract all contact information. Webpage: {{page}}",\r
    "connection": "CHAT AUTO",\r
    "timeout": 30000\r
  }'\r
```\r
\r
---\r
\r
## Common Parameters\r
\r
| Parameter | Required | Default | Description |\r
|-----------|----------|---------|-------------|\r
| action | yes | — | `scrape`, `serp`, `command`, or `prompt` |\r
| url | no | — | Target page URL (ignored by `serp`) |\r
| node | no | — | Node ID (`"r2d2"`), multiple (`"r2d2 c3po"`), first N (`"5"`), or all (`"*"`) |\r
| timeout | no | 300000 | Max wait time in ms (max 5 minutes) |\r
| resultsWebhook | no | — | URL to POST results to asynchronously (retained 30 days) |\r
| connection | no | — | AI model for `command`/`prompt` actions |\r
\r
## Node Targeting\r
\r
- Omit `node` to use the default node\r
- `"node": "mynode"` — target a specific node by ID\r
- `"node": "node1 node2"` — target multiple nodes\r
- `"node": "3"` — use first 3 available nodes\r
- `"node": "*"` — broadcast to all nodes\r
\r
## Async Results via Webhook\r
\r
Set `resultsWebhook` to receive results asynchronously. The action stays alive for up to 30 days, useful when target nodes are temporarily offline.\r
\r
```json\r
{\r
  "action": "scrape",\r
  "url": "https://example.com",\r
  "resultsWebhook": "https://your-server.com/webhook",\r
  "timeout": 15000\r
}\r
```\r
\r
## Tips\r
\r
- Scraping behind-login pages works because HARPA runs inside a real browser session with the user's cookies and auth state.\r
- Use the `grab` array with multiple selectors to extract structured data in a single request.\r
- For long-running AI commands, increase `timeout` (max 300000ms / 5 min) or use `resultsWebhook`.\r
- The `{{page}}` variable in prompts injects the full page content — use it to give AI context about the current page.\r
Usage Guidance
This skill appears to do what it says: call the HARPA Grid REST API using a HARPA_API_KEY to control browser nodes and scrape pages. Before installing, consider the following in plain terms: - HARPA_API_KEY gives the service the ability to run actions in your browser nodes and access pages those nodes can reach, including pages behind your login cookies — treat it like a powerful secret. Don't reuse the key elsewhere. - The API supports resultsWebhook (posting results to an arbitrary URL). If you or an automation supply a webhook, scraped page contents (including potentially sensitive data) can be sent to that external server and retained for up to 30 days. Only use trusted webhook endpoints. - Ensure the HARPA Chrome extension and any nodes you use are legitimately installed from the official source (https://harpa.ai). A malicious or compromised extension/node could expose more data. - This skill is instruction-only (no code installed), so risks come from the remote API and what you ask it to scrape. Limit requests to non-sensitive pages, or run automation from isolated browser profiles/accounts for scraping protected content. - Operational advice: rotate the HARPA_API_KEY if you suspect misuse, monitor API activity if HARPA provides logs, and review the HARPA Grid docs and privacy policy to understand retention and sharing. If you need, I can point out specific request parameters and example payloads that are safer (e.g., avoid resultsWebhook, limit node broadcasting, and avoid scraping authenticated pages).
Capability Analysis
Type: OpenClaw Skill Name: harpa-ai Version: 1.0.0 The skill bundle is designed for legitimate browser automation via the HARPA AI Grid API. However, it exposes the `resultsWebhook` parameter in `SKILL.md`, which allows directing all scraped data, search results, or AI command/prompt outputs to an arbitrary, user-defined URL. While this is a feature of the HARPA API, its availability means a malicious prompt or a compromised agent could leverage this capability to exfiltrate sensitive data from any website the HARPA node can access to an attacker-controlled server. This represents a significant data exfiltration risk, classifying it as suspicious due to the potential for misuse, even without explicit malicious intent in the skill's design.
Capability Assessment
Purpose & Capability
Name/description describe browser automation and scraping via HARPA Grid. Declared requirement (HARPA_API_KEY) and optional tools (curl/wget) are exactly what this integration needs. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
SKILL.md gives concrete curl examples that only use the HARPA API and the HARPA_API_KEY. However, the API explicitly supports scraping pages using the user's browser session (cookies) and sending async results to arbitrary webhooks — both of which enable exfiltration of sensitive page content if misused. The instructions do not instruct the agent to read local files or other unrelated environment variables.
Install Mechanism
Instruction-only skill with no install spec or code. This is low-risk from an install perspective (nothing is written to disk by the skill itself).
Credentials
Only a single credential (HARPA_API_KEY) is required and declared as the primary credential; that aligns with the documented API usage. No unrelated secrets or system paths are requested.
Persistence & Privilege
always:false (default) and agent-autonomy not disabled. The skill does not request permanent/always-on presence or modification of other skills. No elevated system privileges are requested.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install harpa-ai
  3. After installation, invoke the skill by name or use /harpa-ai
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release. Scrape web pages, search the web, run AI commands and prompts on live websites via HARPA AI Grid REST API.
Metadata
Slug harpa-ai
Version 1.0.0
License
All-time Installs 1
Active Installs 1
Total Versions 1
Frequently Asked Questions

What is HARPA AI?

Automate web browsers, scrape pages, search the web, and run AI prompts on live websites via HARPA AI Grid REST API. It is an AI Agent Skill for Claude Code / OpenClaw, with 759 downloads so far.

How do I install HARPA AI?

Run "/install harpa-ai" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is HARPA AI free?

Yes, HARPA AI is completely free (open-source). You can download, install and use it at no cost.

Which platforms does HARPA AI support?

HARPA AI is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created HARPA AI?

It is built and maintained by Alex (@alxsharuk); the current version is v1.0.0.

💬 Comments