← Back to Skills Marketplace
Super Lobster
by
MrHeroJack
· GitHub ↗
· v1.0.0
· MIT-0
104
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install super-lobster
Description
Performs aggressive web research and data extraction via local scripts, browser rendering, crawling, and command execution on a China-networked gateway.
Usage Guidance
This skill provides useful scraping tools, but it also tells the agent to write and run arbitrary code as root and to invoke host Chrome without declaring that dependency. Before installing: 1) Verify the host has /usr/bin/google-chrome-stable and the required Python packages (requests, bs4, trafilatura) or run in an isolated sandbox. 2) Audit the bundled scripts line-by-line (they are short) and fix any bugs; note fetch_url.py contains a likely string/newline bug. 3) Restrict where the agent can write and execute code (avoid /root if possible) and limit outbound network access to only needed endpoints. 4) If you don't fully trust the skill author or the gateway environment, do not enable this skill on production or sensitive hosts.
Capability Analysis
Type: OpenClaw Skill
Name: super-lobster
Version: 1.0.0
The skill bundle provides powerful web research and local execution capabilities, including a headless browser and a site crawler. It is classified as suspicious due to high-risk configurations such as the '--no-sandbox' flag in chrome_dump_dom.sh and render_url.py, which significantly increases the host's attack surface if the browser encounters malicious web content. Additionally, the scripts (fetch_url.py, render_url.py) lack input validation on the URL parameter, creating a risk for Server-Side Request Forgery (SSRF) or local file access via file:// schemes.
Capability Assessment
Purpose & Capability
Name/description match the included tools: fetch, render, extract, and crawl scripts for aggressive web research. However, the skill invokes /usr/bin/google-chrome-stable and requires Python libraries (requests, BeautifulSoup, trafilatura) but declares no required binaries or dependencies — a mismatch between claimed needs and actual files.
Instruction Scope
SKILL.md explicitly allows writing and executing arbitrary Python/shell programs under /root/.openclaw/workspace/memory/tmp and running local commands (including headless Chrome). That grants the agent broad ability to run arbitrary code and make network requests beyond narrowly-scoped scraping, which could be used to exfiltrate data or perform other actions outside the stated task.
Install Mechanism
No install spec (instruction-only) and code files are included in the skill bundle. This minimizes remote-download risk, but the runtime depends on host-provisioned binaries (chrome) and Python packages that may not exist — the skill assumes host tooling that isn't declared.
Credentials
The skill requests no credentials or env vars, yet the tools will perform arbitrary outbound network requests and require host executables and Python packages. The lack of declared required binaries/deps and the instruction to write code as root are disproportionate to a simple scraper and reduce transparency about needed privileges.
Persistence & Privilege
always is false (good), but the SKILL.md directs creating and executing scripts under /root paths. That effectively grants persistent local execution capability on the gateway for this skill's user context, increasing blast radius if the skill or its outputs are malicious or flawed.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install super-lobster - After installation, invoke the skill by name or use
/super-lobster - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release with aggressive web research and automation capabilities:
- Provides tools for direct URL fetching, main content extraction, browser DOM rendering, and site crawling.
- Designed for operation in a China network environment—does not assume western search engines or APIs are reachable.
- Prefers local execution for scripting, scraping, parsing, and automation tasks.
- Includes clear default workflows and tool usage guidelines for efficient information retrieval and processing.
- Outlines specific rules for browser usage, coding, and network practices to optimize reliability and resource management.
Metadata
Frequently Asked Questions
What is Super Lobster?
Performs aggressive web research and data extraction via local scripts, browser rendering, crawling, and command execution on a China-networked gateway. It is an AI Agent Skill for Claude Code / OpenClaw, with 104 downloads so far.
How do I install Super Lobster?
Run "/install super-lobster" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Super Lobster free?
Yes, Super Lobster is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Super Lobster support?
Super Lobster is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Super Lobster?
It is built and maintained by MrHeroJack (@mrherojack); the current version is v1.0.0.
More Skills