Data Scraper

Extract data from websites and APIs for analysis. Use when user needs to collect product prices from e-commerce sites, gather news articles, extract structur...

This skill contains an executable Python scraper but the documentation overstates its capabilities (login, click-style pagination, XPath) which the script does not implement — treat those docs as inaccurate. Before using: (1) inspect or run the script in a safe sandbox; (2) do not pass credentials or sensitive file paths to the tool (it will write files to paths you specify); (3) fix or remove the TLS verification bypass in fetch_page (re-enable certificate checks) unless you understand and accept the risk; (4) test scraping on non-sensitive, permitted sites and confirm legal/robots.txt compliance; (5) if you need authentication/pagination/XPath support, either extend the script yourself or obtain a tool that explicitly implements and documents those features.

Type: OpenClaw Skill Name: scraper-pro Version: 1.0.0 The skill bundle contains a web scraping script (scripts/scrape.py) that explicitly disables SSL certificate verification (ssl.CERT_NONE), which is a high-risk security vulnerability allowing for Man-in-the-Middle (MITM) attacks. Additionally, there is a discrepancy between the documentation (SKILL.md), which claims to support authentication and a '--login' flag, and the actual Python implementation which lacks these features. While these are significant flaws, they appear to be unintentional vulnerabilities rather than active malware.