← Back to Skills Marketplace
baolige2023

Social Media Content Scraper Pro

by baolige2023 · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
132
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install wechat-content-scraper-intl
Description
Social Media Content Bulk Scraper, extract articles/posts from WeChat, Instagram, TikTok, YouTube, export to Markdown/HTML with full metadata. $0.005 USDT pe...
Usage Guidance
This skill is inconsistent and risky in several ways. Before installing or running it: 1) Don't trust the embedded API key/SECRET_KEY — treat them as exposed. Ask the author to remove hard-coded secrets and require credentials via environment variables. 2) Confirm provenance and the SkillPay billing integration (whose API key is embedded) — avoid using that key; use your own account or sandbox. 3) Expect the backend to be WeChat-only and mostly simulated, despite UI claims for other platforms — request a clear feature matrix and working endpoints. 4) Run the code in an isolated sandbox (no sensitive network access, no production credentials) to inspect runtime behavior. 5) Require dependency listing (requirements.txt) and fix mismatched frontend/backend routes and obvious bugs (e.g., missing timedelta import). 6) Consider legal/ToS risks: bulk scraping social platforms may violate terms of service or copyright law. If you need a reliable scraper, ask the developer for a corrected, dependency-declared release, removal/rotation of embedded secrets, and proof that external billing/account keys are legitimate.
Capability Analysis
Type: OpenClaw Skill Name: wechat-content-scraper-intl Version: 1.0.0 The skill bundle is classified as suspicious because it implements a mandatory payment gate and hardcodes a sensitive API key ('SKILLPAY_API_KEY') and 'SECRET_KEY' in 'scripts/app.py', while the core functionality is deceptive. The scraping logic in 'scripts/app.py' consists entirely of mock data despite the 'Pro' branding and USDT pricing mentioned in 'SKILL.md'. Additionally, the frontend ('templates/index.html') and backend are functionally disconnected, with JavaScript calling non-existent routes like '/start' and '/tasks', suggesting the bundle is either a broken template or a low-effort attempt to solicit payments for non-functional software.
Capability Assessment
Purpose & Capability
The README and UI advertise scraping WeChat, Instagram, TikTok, YouTube, and Twitter/X, but the server code only accepts and simulates mp.weixin.qq.com (WeChat) URLs and returns generated sample content. The frontend templates list multiple platforms, but backend route names and behavior are inconsistent (frontend calls endpoints like /start, /tasks, /task while backend defines /create_task, /task_status/<id>, /articles/<id>, etc.). This mismatch means the skill does not implement the multi-platform capabilities it advertises.
Instruction Scope
SKILL.md instructs a payment flow and entering profile URLs, which aligns with the included app, but the code will run a Flask web server, accept arbitrary profile URLs, download and store scraped content and images to a local data folder, and call external billing endpoints. The skill claims '100% safe and secure local data storage' despite storing arbitrary external HTML/content locally and serving it back via templates (possible XSS or serving of copyrighted/private content). Also the SKILL.md tells reviewers to 'review included files' — the code contains logic that will perform network calls and file writes not fully disclosed in SKILL.md.
Install Mechanism
There is no install specification even though the code imports third-party Python packages (requests, bs4/BeautifulSoup, pandas). Missing dependency declarations means runtime surprises. There is no external download/install step (low supply-chain risk), but the skill runs a web server and writes data to a local data directory — behavior not captured by an install manifest.
Credentials
The skill declares no required environment variables, yet the code contains hard-coded sensitive values: a SECRET_KEY and a SKILLPAY_API_KEY embedded in the source. Hard-coded API keys are a red flag (exposes credentials and indicates the skill will communicate with an external billing service). No justification is provided for embedding secrets or for not using environment variables. The skill also makes outbound HTTP requests to skillpay.me and arbitrary profile URLs.
Persistence & Privilege
always:false (default) and the skill does not request elevated platform privileges. It persists data in a local data directory and runs a Flask app; this is normal for a web tool but means the agent will create files and open a listening web interface if executed. That persistence is not inherently malicious but increases blast radius if combined with embedded secrets or network access.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install wechat-content-scraper-intl
  3. After installation, invoke the skill by name or use /wechat-content-scraper-intl
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of Social Media Content Scraper Pro. - Bulk scraping for WeChat, Instagram, TikTok, and YouTube official accounts/profiles. - Exports content to Markdown, HTML, or plain text with full metadata. - Supports auto deduplication and batch image download. - Offers local data storage for privacy and a simple, no-code user interface. - Pricing: $0.005 USDT per scrape or $4.99 lifetime unlimited access.
Metadata
Slug wechat-content-scraper-intl
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Social Media Content Scraper Pro?

Social Media Content Bulk Scraper, extract articles/posts from WeChat, Instagram, TikTok, YouTube, export to Markdown/HTML with full metadata. $0.005 USDT pe... It is an AI Agent Skill for Claude Code / OpenClaw, with 132 downloads so far.

How do I install Social Media Content Scraper Pro?

Run "/install wechat-content-scraper-intl" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Social Media Content Scraper Pro free?

Yes, Social Media Content Scraper Pro is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Social Media Content Scraper Pro support?

Social Media Content Scraper Pro is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Social Media Content Scraper Pro?

It is built and maintained by baolige2023 (@baolige2023); the current version is v1.0.0.

💬 Comments