Web Scraper as a Service

Build client-ready web scrapers with clean data output. Use when creating scrapers for clients, extracting data from websites, or delivering scraping projects.

This skill appears coherent and focused on building scrapers, but consider these practical precautions before using it: (1) The skill will fetch arbitrary target URLs — ensure you (and your client) are authorized to scrape the target and that scraping does not violate site terms or laws. (2) Some sites use CAPTCHAs or anti-bot protections; the guidance mentions detecting these but does not instruct bypassing them — avoid attempting evasive or unauthorized bypass techniques. (3) If you execute generated scrapers, run them in an isolated environment (container/VM) and watch network usage and stored data to avoid accidental leakage of client or system secrets. (4) The skill has no stated source or homepage — if you need long-term support or guarantees, prefer vetted libraries or an authored/published implementation. (5) If scraping requires authenticated access to a target, expect you will need to supply credentials separately; the skill does not request or manage credentials itself.

Type: OpenClaw Skill Name: web-scraper-as-a-service Version: 1.0.0 The skill is classified as suspicious due to the broad permissions granted to the AI agent, specifically the `Bash` and `WebFetch` tools listed in `SKILL.md`. While these tools are plausibly necessary for the stated purpose of building and running web scrapers, the ability to execute arbitrary shell commands (`Bash`) and make network requests to external endpoints (`WebFetch`) without explicit constraints in the instructions presents a significant vulnerability. There is no clear evidence of intentional malicious behavior or prompt injection attempts within the provided files, but the powerful capabilities could be exploited if the agent is given a malicious target URL or an adversarial prompt.