Scrapling Yoo

Advanced web scraping with Scrapling — MCP-native guidance for extraction, crawling, and anti-bot handling. Use via mcporter (MCP) for execution; this skill...

This package appears to be legitimate-sounding scraping guidance and helper scripts, but take these precautions before installing or running: 1) Verify provenance: check the upstream project (GitHub/ PyPI) and confirm the maintainer matches the registry listing; the included _meta.json ownerId differs from the registry ownerId which may indicate repackaging. 2) Inspect and pin the pip package: if you pip install scrapling, confirm the exact PyPI project name, version, and upstream repository. Prefer installing in a fresh virtualenv or container. 3) Be careful with credentials and external services: features like proxy rotation or 'solve_cloudflare' commonly require external providers and API keys—do not reuse sensitive credentials. The skill does not request env vars but examples expect you to supply credentials if you use those features. 4) Legal/ethical reminder: the docs include explicit warnings about not scraping private or paywalled data. Only use stealthy/rotation features on targets you are authorized to access. 5) Run in a sandbox first: execute the included smoke test script in an isolated environment and review network traffic if you are concerned about exfiltration. If you want a stronger assurance, ask the maintainer for the canonical repository URL and signed release artifacts, or prefer packages that are traceable to a known PyPI/GitHub owner.

Type: OpenClaw Skill Name: scrapling-yoo Version: 1.0.0 This skill bundle provides advanced web scraping capabilities via the Scrapling library, including fetching arbitrary URLs, browser automation, anti-bot bypass (e.g., Cloudflare/Turnstile solving), and proxy rotation, as demonstrated in `scripts/scrapling_scrape.py` and `scripts/scrapling_smoke_test.py`. While the `SKILL.md` and `references/anti-bot.md` contain explicit 'Guardrails' and warnings against unauthorized use, the inherent power of these features presents a significant risk of misuse for unauthorized data collection or denial-of-service activities. There is no evidence of intentional malicious behavior (e.g., data exfiltration to unauthorized endpoints, persistence mechanisms) within the code itself, but the high-risk capabilities warrant a 'suspicious' classification.