THE_TIME_MASHEEN

Combine live scraping, historical snapshots via Wayback Machine, and interactive browser automation to extract, compare, and automate web data from any site.

This skill implements exactly what it claims—scraping, Wayback queries, and browser automation—but it includes features explicitly intended to evade protections and encourages scraping login- or paywall-gated content. Before installing or running it: - Verify the source: the README suggests fetching install.sh from raw.githubusercontent.com/mrjessek/the-time-masheen which does not match the registry owner metadata; confirm you trust that repository and author. - Avoid curl | bash from untrusted URLs. Prefer inspecting the bundled install.sh in this package (it runs pip3 and npm installs and is readable) or run installs manually in a controlled environment. - Run installs in an isolated environment (VM or container) to limit system-wide changes from pip/npm global installs and to contain browser binaries. - Consider legal and ethical implications: only use against sites you own or have explicit permission to scrape/automate; 'stealth' and 'solve-cloudflare' options facilitate evasion and may violate terms of service or laws. - Review the upstream PyPI/npm packages (scrapling, playwright-cli) and their reputations before installing. If you plan to use credentials for target sites, do not store them in shared environment variables; prefer interactive input and temporary session storage. Given the README/source inconsistency and the tool's explicit evasive capabilities, proceed with caution—audit sources and run in isolation. If you want, I can (a) compare the bundled install.sh to the raw GitHub script URL it points to, or (b) summarize which exact commands will be run by the installer so you can review them line-by-line.

Type: OpenClaw Skill Name: the-time-masheen Version: 1.0.2 The skill provides a 'web intelligence' toolkit that integrates high-risk capabilities including automated browser interaction (clicking, form filling, and arbitrary JavaScript execution via `playwright-cli eval`) and stealth scraping designed to bypass bot protections like Cloudflare (via `scrapling`). While these tools are aligned with the stated purpose of advanced web research and archival analysis, they grant the agent significant power to interact with web applications and bypass security controls, which could be misused for unauthorized actions or data extraction. The `install.sh` script performs global npm installations and fetches browser binaries, and the `README.md` promotes a `curl | bash` installation method (IOC: `raw.githubusercontent.com/mrjessek/the-time-masheen/main/install.sh`).