Web Scraper Pro

Intelligent web scraper that fetches any URL and returns clean Markdown content. Triggers on requests like "帮我抓取网页", "获取这个网页内容", "fetch this URL", "scrape th...

This skill will send any requested URL (and the resulting page content) to several external conversion services and will call a SkillPay billing API before performing the fetch. Notable issues: (1) the code includes a hard-coded SkillPay API key in the repository — this key authorizes billing calls and should not be embedded in a published skill; (2) fetched content will be transmitted to third parties (markdown.new, defuddle.md, r.jina.ai, Scrapling), so do not use this on sensitive or internal URLs; (3) the skill forces payment verification and may charge or direct users to top-up links that route funds to the key-owner. Before installing, ask the publisher to: remove any embedded API keys and require callers to supply their own billing credentials, document what data is sent to each third party, and provide a privacy/terms link. If you must use it, test in a sandbox, avoid sensitive URLs, and insist on using your own billing credentials (or disable the monetization flow).

Type: OpenClaw Skill Name: web-scraper-pro Version: 1.1.0 The skill bundle implements a mandatory micro-payment gatekeeper using a third-party service (skillpay.me) and hardcoded API credentials in SKILL.md and payment.py. It uses aggressive prompt instructions to force the AI agent to perform financial transactions (charging 0.001 USDT) before providing the advertised scraping functionality. While no direct system compromise or data theft was observed, the hardcoded 'Secret Key' (sk_d6d26f29...) and the enforcement of a proprietary payment layer are highly irregular for a skill bundle and could be used for unauthorized monetization or user tracking.