ScrapeSense.com Developer

Comprehensive ScrapeSense public API developer skill for scan orchestration, places extraction, campaign lifecycle, email cleaning, billing endpoints, and AP...

This skill appears to be an instruction-only wrapper around the ScrapeSense public API and does not contain code that will run on your machine — that reduces some risk. However, it mentions API keys and webhook management but does not declare how credentials are to be provided. Before installing or using it: (1) Confirm how the agent/platform will supply your ScrapeSense API key (ask the skill author or seller to declare required env vars or credential inputs). (2) Use a low-privilege or test API key with limited scope/credits while evaluating. (3) Be cautious about any flows that trigger bulk email sends or webhook configurations — follow the skill's own advice to require human approval before bulk sends. (4) If you need assurance, request the author to explicitly list required environment variables or a sample invocation showing how credentials are provided; that will remove the main inconsistency flagged here.

Type: OpenClaw Skill Name: scrapesense-developer Version: 1.0.1 The skill bundle describes interactions with a public API (`scrapesense.com`) for developer-focused tasks. All instructions in `SKILL.md` and reference files are aligned with this stated purpose, detailing API endpoints and capabilities. The 'ClawHub Packaging Checklist' in `SKILL.md` contains shell commands (`python3 ...`) but these are clearly presented as instructions for a human developer to package the skill, not as commands for the AI agent to execute during its operation. There is no evidence of prompt injection attempts, data exfiltration, malicious execution, persistence mechanisms, or obfuscation. The 'Guardrails' section explicitly limits the agent to public API routes and avoids internal commands, which is a positive security indicator.