← 返回 Skills 市场
alxsharuk

HARPA AI

作者 Alex · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
759
总下载
2
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install harpa-ai
功能描述
Automate web browsers, scrape pages, search the web, and run AI prompts on live websites via HARPA AI Grid REST API
使用说明 (SKILL.md)

\r \r

HARPA Grid — Browser Automation API\r

\r HARPA Grid lets you orchestrate real web browsers remotely. You can scrape pages, search the web, run built-in or custom AI commands, and send AI prompts with full page context — all through a single REST endpoint.\r \r

Prerequisites\r

\r The user must have:\r

  1. HARPA AI Chrome Extension installed from https://harpa.ai\r
  2. At least one active Node — a browser with HARPA running (configured in the extension's AUTOMATE tab)\r
  3. A HARPA API key — obtained from the HARPA extension AUTOMATE tab. The key is provided as the HARPA_API_KEY environment variable.\r \r If the user hasn't set up HARPA yet, direct them to: https://harpa.ai/grid/browser-automation-node-setup\r \r

API Reference\r

\r Endpoint: POST https://api.harpa.ai/api/v1/grid\r Auth: Authorization: Bearer $HARPA_API_KEY\r Content-Type: application/json\r \r Full reference: https://harpa.ai/grid/grid-rest-api-reference\r \r ---\r \r

Actions\r

\r

1. Scrape a Web Page\r

\r Extract full page content (as markdown) or specific elements via CSS/XPath/text selectors.\r \r Full page scrape:\r \r

curl -s -X POST https://api.harpa.ai/api/v1/grid \\r
  -H "Authorization: Bearer $HARPA_API_KEY" \\r
  -H "Content-Type: application/json" \\r
  -d '{\r
    "action": "scrape",\r
    "url": "https://example.com",\r
    "timeout": 15000\r
  }'\r
```\r
\r
**Targeted element scrape (grab):**\r
\r
```bash\r
curl -s -X POST https://api.harpa.ai/api/v1/grid \\r
  -H "Authorization: Bearer $HARPA_API_KEY" \\r
  -H "Content-Type: application/json" \\r
  -d '{\r
    "action": "scrape",\r
    "url": "https://example.com/products",\r
    "grab": [\r
      {\r
        "selector": ".product-title",\r
        "selectorType": "css",\r
        "at": "all",\r
        "take": "innerText",\r
        "label": "titles"\r
      },\r
      {\r
        "selector": ".product-price",\r
        "selectorType": "css",\r
        "at": "all",\r
        "take": "innerText",\r
        "label": "prices"\r
      }\r
    ],\r
    "timeout": 15000\r
  }'\r
```\r
\r
**Grab fields:**\r
\r
| Field | Required | Default | Values |\r
|-------|----------|---------|--------|\r
| selector | yes | — | CSS (`.class`, `#id`), XPath (`//h2`), or text content |\r
| selectorType | no | auto | `auto`, `css`, `xpath`, `text` |\r
| at | no | first | `all`, `first`, `last`, or a number |\r
| take | no | innerText | `innerText`, `textContent`, `innerHTML`, `outerHTML`, `href`, `value`, `id`, `className`, `attributes`, `styles`, `[attrName]`, `(styleName)` |\r
| label | no | data | Custom label for extracted data |\r
\r
### 2. Search the Web (SERP)\r
\r
Perform a web search. Supports operators like `site:`, `intitle:`.\r
\r
```bash\r
curl -s -X POST https://api.harpa.ai/api/v1/grid \\r
  -H "Authorization: Bearer $HARPA_API_KEY" \\r
  -H "Content-Type: application/json" \\r
  -d '{\r
    "action": "serp",\r
    "query": "OpenClaw AI agent framework",\r
    "timeout": 15000\r
  }'\r
```\r
\r
### 3. Run an AI Command\r
\r
Execute one of 100+ built-in HARPA commands or a custom automation on a target page.\r
\r
```bash\r
curl -s -X POST https://api.harpa.ai/api/v1/grid \\r
  -H "Authorization: Bearer $HARPA_API_KEY" \\r
  -H "Content-Type: application/json" \\r
  -d '{\r
    "action": "command",\r
    "url": "https://example.com/article",\r
    "name": "Extract data",\r
    "inputs": "List all headings with their word counts",\r
    "connection": "HARPA AI",\r
    "resultParam": "message",\r
    "timeout": 30000\r
  }'\r
```\r
\r
- `name` — command name (e.g. `"Summary"`, `"Extract data"`, or any custom command)\r
- `inputs` — pre-filled user inputs for multi-step commands\r
- `resultParam` — HARPA parameter to return as result (default: `"message"`)\r
- `connection` — AI model to use (e.g. `"HARPA AI"`, `"gpt-4o"`, `"claude-3.5-sonnet"`)\r
\r
### 4. Run an AI Prompt\r
\r
Send a custom AI prompt with page context. Use `{{page}}` to inject the page content.\r
\r
```bash\r
curl -s -X POST https://api.harpa.ai/api/v1/grid \\r
  -H "Authorization: Bearer $HARPA_API_KEY" \\r
  -H "Content-Type: application/json" \\r
  -d '{\r
    "action": "prompt",\r
    "url": "https://example.com",\r
    "prompt": "Analyze the current page and extract all contact information. Webpage: {{page}}",\r
    "connection": "CHAT AUTO",\r
    "timeout": 30000\r
  }'\r
```\r
\r
---\r
\r
## Common Parameters\r
\r
| Parameter | Required | Default | Description |\r
|-----------|----------|---------|-------------|\r
| action | yes | — | `scrape`, `serp`, `command`, or `prompt` |\r
| url | no | — | Target page URL (ignored by `serp`) |\r
| node | no | — | Node ID (`"r2d2"`), multiple (`"r2d2 c3po"`), first N (`"5"`), or all (`"*"`) |\r
| timeout | no | 300000 | Max wait time in ms (max 5 minutes) |\r
| resultsWebhook | no | — | URL to POST results to asynchronously (retained 30 days) |\r
| connection | no | — | AI model for `command`/`prompt` actions |\r
\r
## Node Targeting\r
\r
- Omit `node` to use the default node\r
- `"node": "mynode"` — target a specific node by ID\r
- `"node": "node1 node2"` — target multiple nodes\r
- `"node": "3"` — use first 3 available nodes\r
- `"node": "*"` — broadcast to all nodes\r
\r
## Async Results via Webhook\r
\r
Set `resultsWebhook` to receive results asynchronously. The action stays alive for up to 30 days, useful when target nodes are temporarily offline.\r
\r
```json\r
{\r
  "action": "scrape",\r
  "url": "https://example.com",\r
  "resultsWebhook": "https://your-server.com/webhook",\r
  "timeout": 15000\r
}\r
```\r
\r
## Tips\r
\r
- Scraping behind-login pages works because HARPA runs inside a real browser session with the user's cookies and auth state.\r
- Use the `grab` array with multiple selectors to extract structured data in a single request.\r
- For long-running AI commands, increase `timeout` (max 300000ms / 5 min) or use `resultsWebhook`.\r
- The `{{page}}` variable in prompts injects the full page content — use it to give AI context about the current page.\r
安全使用建议
This skill appears to do what it says: call the HARPA Grid REST API using a HARPA_API_KEY to control browser nodes and scrape pages. Before installing, consider the following in plain terms: - HARPA_API_KEY gives the service the ability to run actions in your browser nodes and access pages those nodes can reach, including pages behind your login cookies — treat it like a powerful secret. Don't reuse the key elsewhere. - The API supports resultsWebhook (posting results to an arbitrary URL). If you or an automation supply a webhook, scraped page contents (including potentially sensitive data) can be sent to that external server and retained for up to 30 days. Only use trusted webhook endpoints. - Ensure the HARPA Chrome extension and any nodes you use are legitimately installed from the official source (https://harpa.ai). A malicious or compromised extension/node could expose more data. - This skill is instruction-only (no code installed), so risks come from the remote API and what you ask it to scrape. Limit requests to non-sensitive pages, or run automation from isolated browser profiles/accounts for scraping protected content. - Operational advice: rotate the HARPA_API_KEY if you suspect misuse, monitor API activity if HARPA provides logs, and review the HARPA Grid docs and privacy policy to understand retention and sharing. If you need, I can point out specific request parameters and example payloads that are safer (e.g., avoid resultsWebhook, limit node broadcasting, and avoid scraping authenticated pages).
功能分析
Type: OpenClaw Skill Name: harpa-ai Version: 1.0.0 The skill bundle is designed for legitimate browser automation via the HARPA AI Grid API. However, it exposes the `resultsWebhook` parameter in `SKILL.md`, which allows directing all scraped data, search results, or AI command/prompt outputs to an arbitrary, user-defined URL. While this is a feature of the HARPA API, its availability means a malicious prompt or a compromised agent could leverage this capability to exfiltrate sensitive data from any website the HARPA node can access to an attacker-controlled server. This represents a significant data exfiltration risk, classifying it as suspicious due to the potential for misuse, even without explicit malicious intent in the skill's design.
能力评估
Purpose & Capability
Name/description describe browser automation and scraping via HARPA Grid. Declared requirement (HARPA_API_KEY) and optional tools (curl/wget) are exactly what this integration needs. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
SKILL.md gives concrete curl examples that only use the HARPA API and the HARPA_API_KEY. However, the API explicitly supports scraping pages using the user's browser session (cookies) and sending async results to arbitrary webhooks — both of which enable exfiltration of sensitive page content if misused. The instructions do not instruct the agent to read local files or other unrelated environment variables.
Install Mechanism
Instruction-only skill with no install spec or code. This is low-risk from an install perspective (nothing is written to disk by the skill itself).
Credentials
Only a single credential (HARPA_API_KEY) is required and declared as the primary credential; that aligns with the documented API usage. No unrelated secrets or system paths are requested.
Persistence & Privilege
always:false (default) and agent-autonomy not disabled. The skill does not request permanent/always-on presence or modification of other skills. No elevated system privileges are requested.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install harpa-ai
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /harpa-ai 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release. Scrape web pages, search the web, run AI commands and prompts on live websites via HARPA AI Grid REST API.
元数据
Slug harpa-ai
版本 1.0.0
许可证
累计安装 1
当前安装数 1
历史版本数 1
常见问题

HARPA AI 是什么?

Automate web browsers, scrape pages, search the web, and run AI prompts on live websites via HARPA AI Grid REST API. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 759 次。

如何安装 HARPA AI?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install harpa-ai」即可一键安装,无需额外配置。

HARPA AI 是免费的吗?

是的,HARPA AI 完全免费(开源免费),可自由下载、安装和使用。

HARPA AI 支持哪些平台?

HARPA AI 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 HARPA AI?

由 Alex(@alxsharuk)开发并维护,当前版本 v1.0.0。

💬 留言讨论