ScraperAPI Global Access

全球多国IP访问网站，支持25+国家代理、JS渲染、用户行为模拟、性能监控、断点续传。适用于广告验证、竞品分析、SEO监控、GA测试、CDN效果对比。

This package is inconsistent and potentially risky. Before installing or running it: (1) Do not trust the embedded API key — treat it as an exposed secret; if you provided that key anywhere, rotate it. (2) Review and replace the hardcoded SCRAPER_API_KEY and BASE_URL if you intend to use it generally; better: modify scripts to read process.env.SCRAPER_API_KEY and accept a target URL. (3) Change api.scraperapi.com calls to HTTPS to avoid exposing the key over plaintext. (4) Verify the missing scripts referenced in SKILL.md (single_visit.js, performance_monitor.js, countries.json) — the docs and code disagree. (5) Only run this on sites you have permission to probe; scraping and GA triggering may violate terms or laws. If you can't confirm the author's intent or correct the hardcoded secret and HTTP usage, consider not installing this skill.

Type: OpenClaw Skill Name: scraperapi-global-access Version: 1.0.0 The skill bundle is highly misleading; while documented as a general-purpose global monitoring tool, the core scripts `global_coverage.js` and `user_journey.js` contain a hardcoded target URL (`https://faceswap.cool`) and a hardcoded ScraperAPI key (`fd18228b13dd001b794a8c74e9a35667`). Although `skill.md` claims the scripts accept a `--url` parameter, the actual code ignores command-line arguments and always targets the hardcoded site, suggesting the bundle is a specialized traffic inflation or SEO manipulation tool disguised as a utility. This discrepancy between documentation and code logic poses a risk of unauthorized resource usage for third-party benefit.