← Back to Skills Marketplace
72
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install kirk-scrape
Description
Performs compliant web scraping with robots.txt checks, rate limiting, GDPR/CCPA-aware data handling, using direct HTTP or SkillBoss API Hub integration.
README (SKILL.md)
name: Scrape name: Scrape description: Legal web scraping with robots.txt compliance, rate limiting, and GDPR/CCPA-aware data handling. Supports both direct HTTP scraping and managed scraping via SkillBoss API Hub. requires_env: [SKILLBOSS_API_KEY]
Pre-Scrape Compliance Checklist
Before writing any scraping code:
- robots.txt — Fetch
{domain}/robots.txt, check if target path is disallowed. If yes, stop. - Terms of Service — Check
/terms,/tos,/legal. Explicit scraping prohibition = need permission. - Data type — Public factual data (prices, listings) is safer. Personal data triggers GDPR/CCPA.
- Authentication — Data behind login is off-limits without authorization. Never scrape protected content.
- API available? — If site offers an API, use it. Always. Scraping when API exists often violates ToS.
Legal Boundaries
- Public data, no login — Generally legal (hiQ v. LinkedIn 2022)
- Bypassing barriers — CFAA violation risk (Van Buren v. US 2021)
- Ignoring robots.txt — Gray area, often breaches ToS (Meta v. Bright Data 2024)
- Personal data without consent — GDPR/CCPA violation
- Republishing copyrighted content — Copyright infringement
Request Discipline
- Rate limit: Minimum 2-3 seconds between requests. Faster = server strain = legal exposure.
- User-Agent: Real browser string + contact email:
Mozilla/5.0 ... (contact: [email protected]) - Respect 429: Exponential backoff. Ignoring 429s shows intent to harm.
- Session reuse: Keep connections open to reduce server load.
Data Handling
- Strip PII immediately — Don't collect names, emails, phones unless legally justified.
- No fingerprinting — Don't combine data to identify individuals indirectly.
- Minimize storage — Cache only what you need, delete what you don't.
- Audit trail — Log what, when, where. Evidence of good faith if challenged.
SkillBoss API Hub Scraping
For managed content extraction with automatic anti-bot handling, use SkillBoss API Hub's scraping capability (type: "scraper"). Authenticate with SKILLBOSS_API_KEY and call https://api.skillbossai.com/v1/pilot. Result is returned at result.data.markdown.
For code patterns, robots.txt parser, and SkillBoss API Hub scraping integration, see code.md
Usage Guidance
This skill's behavior (direct HTTP scraping and optional managed scraping via a third party) is consistent with its description, but there are several red flags you should resolve before installing:
- Metadata mismatch: the registry lists no required env vars but the SKILL.md and code examples require SKILLBOSS_API_KEY. Confirm the required environment variables in the published metadata.
- Inconsistent endpoints: documentation references multiple domains (api.skillbossai.com, api.heybossai.com, and skillboss.co). Ask the publisher which domain is authoritative and verify TLS certs and ownership of the endpoint before providing an API key.
- Data exfiltration: using the managed-scraping path will send scraped page content to the third-party service. Do not provide sensitive or private data unless you trust that service and its privacy/compliance posture.
- Ask for provenance: request a source repository or official homepage from the publisher so you can review real source code or confirm the vendor.
If the publisher updates the registry to declare SKILLBOSS_API_KEY, consolidates and documents the single correct API domain, and provides a verifiable homepage or source repo, this would increase confidence and likely make the skill benign for typical use-cases. Until then, treat it cautiously and avoid supplying API keys or sensitive targets.
Capability Analysis
Type: OpenClaw Skill
Name: kirk-scrape
Version: 1.0.0
The 'kirk-scrape' skill provides tools and guidelines for ethical web scraping, including robots.txt compliance, rate limiting, and PII handling. The code in code.md implements standard scraping patterns and integrates with the SkillBoss API Hub (api.skillbossai.com) for managed extraction, showing no signs of malicious intent or data exfiltration.
Capability Tags
Capability Assessment
Purpose & Capability
The skill claims to perform compliant web scraping and to support a managed 'SkillBoss API Hub' integration; that capability reasonably requires an API key. However the registry metadata lists no required env vars while SKILL.md and code.md both reference SKILLBOSS_API_KEY — a clear mismatch between declared requirements and the runtime instructions.
Instruction Scope
SKILL.md and code.md stay focused on scraping best-practices (robots.txt, rate-limiting, PII handling). They also include patterns to call a managed scraping API and show sending scraped page content to a third party. That data-transmission is expected for a managed-scraping mode but is an important privacy/third-party-exfiltration behavior the user should be aware of.
Install Mechanism
This is an instruction-only skill with no install spec or code files to fetch or execute, which minimizes install-time risk.
Credentials
The only credential referenced is SKILLBOSS_API_KEY, which is proportionate for a managed-scraping integration. However the skill manifest/registry incorrectly lists no required env vars while SKILL.md/code.md require the API key. Additionally, the documentation uses multiple domains for the same service (SKILL.md: api.skillbossai.com, code.md: api.heybossai.com, README: skillboss.co), creating uncertainty about which external endpoint will receive data and which service will hold the API key.
Persistence & Privilege
The skill does not request always:true, does not declare system-wide config changes, and is not requesting elevated or permanent privileges.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install kirk-scrape - After installation, invoke the skill by name or use
/kirk-scrape - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of the "Scrape" skill focused on compliant web scraping.
- Features built-in robots.txt checking and pre-scrape compliance checklist.
- Supports both direct HTTP scraping and managed scraping via SkillBoss API Hub.
- Enforces rate limiting, legal guidelines (GDPR/CCPA), and ethical data handling practices.
- Documentation included for legal boundaries, request discipline, and data minimization.
- Requires `SKILLBOSS_API_KEY` for API Hub integration.
Metadata
Frequently Asked Questions
What is scrape?
Performs compliant web scraping with robots.txt checks, rate limiting, GDPR/CCPA-aware data handling, using direct HTTP or SkillBoss API Hub integration. It is an AI Agent Skill for Claude Code / OpenClaw, with 72 downloads so far.
How do I install scrape?
Run "/install kirk-scrape" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is scrape free?
Yes, scrape is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does scrape support?
scrape is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created scrape?
It is built and maintained by KirkRaman (@kirkraman); the current version is v1.0.0.
More Skills