xcrawl-crawl
Crawl Websites with Bounded XCrawl Jobs
Bulk website collection requires clear crawl boundaries and asynchronous result tracking. This skill guides XCrawl requests, filtering rules, and retrieval of original API responses.
Mit meinem Agent installieren
Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.
Review the Skillstore skill "xcrawl-crawl" from https://skillstore.io/skills/xcrawl-api-xcrawl-crawl.md and its manifest at https://skillstore.io/api/skills/xcrawl-api-xcrawl-crawl/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.
Agent-lesbare Ressourcen
Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.
Testen
„xcrawl-crawl“ wird verwendet. Describe an illustrative request for a documentation crawl limited to 20 pages and depth 2.
Erwartetes Ergebnis:
- Illustrative request: documentation paths only, 20-page limit, depth 2, Markdown and links, with TLS verification enabled.
- The create response supplies a task identifier and an initial pending status.
- The result response reports job status, available page data, and credit usage.
„xcrawl-crawl“ wird verwendet. Describe the expected response delivery when an approved crawl fails. Do not invent live results.
Erwartetes Ergebnis:
- The endpoint flow and submitted request payload accompany the original create and result response bodies.
- Any upstream error details are returned without presenting speculative page counts as completed coverage.
- No derived summary is added unless explicitly requested.
Sicherheitsaudit
Mittleres RisikoAll 132 static findings are false positives involving Markdown, documented configuration, or legitimate XCrawl authentication and API calls. A separate finding concerns the documented default that disables target TLS verification; both usage examples omit a secure override. No evidence found of malicious credential exfiltration, destructive operations, or embedded prompt injection.
Bestätigte Sicherheitsbedenken (1)
Risikofaktoren
⚙️ Externe Befehle (50)
🌐 Netzwerkzugriff (11)
📁 Dateisystemzugriff (10)
🔑 Umgebungsvariablen (12)
Diesen Bericht teilen & zitieren
Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.
Berichtslink kopieren
https://skillstore.io/skills/xcrawl-api-xcrawl-crawl/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown-Badge
[](https://skillstore.io/skills/xcrawl-api-xcrawl-crawl?utm_source=security_passport_badge)HTML-Badge
<a href="https://skillstore.io/skills/xcrawl-api-xcrawl-crawl?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/xcrawl-api-xcrawl-crawl/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Einbettungskarte
<iframe src="https://skillstore.io/embed/skills/xcrawl-api-xcrawl-crawl.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Wissenschaftliche Zitate (APA · BibTeX · CFF)
APA-Zitat
xcrawl-api. (2026). xcrawl-crawl security audit report (audit version 1) [Author version 1.0.2]. Skillstore. https://skillstore.io/skills/xcrawl-api-xcrawl-crawl/audits/1BibTeX-Zitat
@techreport{xcrawl-api-xcrawl-api-xcrawl-crawl-2026,
author = {xcrawl-api},
title = {xcrawl-crawl security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/xcrawl-api-xcrawl-crawl/audits/1},
note = {Author version 1.0.2}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "xcrawl-crawl security audit report (audit version 1)"
version: "1.0.2"
type: report
authors:
- name: "xcrawl-api"
date-released: "2026-10-17"
url: "https://skillstore.io/skills/xcrawl-api-xcrawl-crawl/audits/1"
identifiers:
- type: other
value: "skillstore:xcrawl-api-xcrawl-crawl:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore-Score
Warum dieser Score Evidenzvertrauen: MittelWas Sie erstellen können
Collect Documentation for Search
Crawl an approved documentation section with path filters and page limits, requesting Markdown and links for later indexing.
Extract Public Research Data
Configure structured extraction for authorized public pages and retrieve the completed job responses for later analysis.
Inspect Rendered Site Content
Request rendered pages and screenshots for a bounded website section, using desktop or mobile viewport settings.
Diese Prompts ausprobieren
Crawl [approved site URL] with a 10-page limit and depth 1. Request Markdown, keep TLS verification enabled, and return the original responses.
Crawl [approved documentation URL], including only /docs/ paths and excluding /blog/. Limit to 100 pages and depth 2. Request Markdown and links. Keep TLS verification enabled and return original create and result responses.
Crawl [approved site URL] with a 50-page limit and depth 2. Extract [fields] using [schema] and request links. Use [locale] and [device]. Keep TLS verification enabled. Poll until completion or failure and return original responses.
Prepare a crawl for [approved site URL] with [page limit], [depth], and [path filters]. Configure [approved HTTPS webhook] for completed and failed events. Keep external links excluded and TLS verification enabled. Confirm scope before starting. Return original API responses.
Bewährte Praktiken
- Set explicit page limits, depth, and path filters before starting any crawl.
- Keep TLS verification enabled and restrict crawl targets and webhook destinations to approved locations.
- Protect the local API key file and avoid sharing secrets in request payloads, logs, or conversation output.
Vermeiden
- Starting broad crawls without explicit scope, page limits, or authorization.
- Accepting the documented TLS verification bypass default for ordinary production targets.
- Treating an initial pending status or estimated page count as proof of completed coverage.
Häufig gestellte Fragen
What must I configure before using this skill?
Does the skill run a local crawler?
How can I restrict crawl scope?
Which output formats are documented?
How are asynchronous results retrieved?
What security setting needs attention?
Entwicklerdetails
Autor
xcrawl-apiLizenz
MIT
Autorenversion
v1.0.2
Skillstore-Revision
r1
Ref.
e7474dc9298cb48291ba8e94ae55fd5e402b4b85
Aktualität der Wartung
17.10.2026
Nutzung
0 Downloads · 0 Aufrufe
Dateistruktur
📄 SKILL.md