📦

xcrawl

Name: xcrawl
Author: xcrawl-api

v1.0.2 コンテンツリビジョン r1 中リスク ⚙️ 外部コマンド🌐 ネットワークアクセス📁 ファイルシステムへのアクセス🔑 環境変数

Extract Web Page Data with XCrawl

Web pages contain useful information in inconsistent formats. This skill guides XCrawl requests for selected formats and structured extraction while preserving upstream responses.

対応: Claude Codex Code(CC)

📊 71 十分

Maintain this Skill? Claim it 📊 71 十分

自分のエージェントでインストール

このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。

エージェントリクエスト

Review the Skillstore skill "xcrawl" from https://skillstore.io/skills/xcrawl-api-xcrawl.md and its manifest at https://skillstore.io/api/skills/xcrawl-api-xcrawl/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。

エージェントが読めるリソース

AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。

Markdown詳細 GET /skills/xcrawl-api-xcrawl.md 署名済み manifest GET /api/skills/xcrawl-api-xcrawl/manifest 署名済み lockfile GET /api/skills/xcrawl-api-xcrawl/lockfile

テストする

「xcrawl」を使用しています。 What should I expect from a synchronous Markdown and links request?

期待される結果:

Illustrative output outline, not a live API result.
Endpoint and mode, followed by the request payload with sensitive values redacted.
The upstream response, including task status and requested content when available.
Available timestamps and credit usage, or error details if the request fails.

「xcrawl」を使用しています。 How will an asynchronous product extraction report its progress?

期待される結果:

Illustrative output outline, not a live API result.
The creation response supplies a task identifier and pending status.
Result requests can report pending, crawling, completed, or failed status.
A completed response includes extracted fields when available; a failed request includes upstream error details.

セキュリティ監査

中リスク

v1 • 2026/10/17 バージョン別レポートを開く

Static alerts describe Markdown syntax, scoped configuration reads, and intended XCrawl authentication rather than demonstrated malicious execution or exfiltration. Semantic review found documented TLS verification bypass defaults and a request-output contract that can expose supplied cookies or headers. No evidence found of prompt injection or malicious intent; provider behavior was not tested.

スキャンされたファイル

269

解析済み行数

レビュー項目

誤検知を無視

確認済みのセキュリティ上の懸念 (2)

中

SKILL.md:135-139

Target TLS Verification Disabled by Default

The request table sets skip_tls_verification to true by default. Following this default can permit intercepted target content and expose supplied target credentials.

The documented default explicitly bypasses certificate verification for target requests. Actual enforcement occurs within the external service and was not tested.

中

SKILL.md:135-136 SKILL.md:173-174 SKILL.md:255-257

Request Output Can Disclose Supplied Secrets

The output contract requires returning request_payload. Payloads can contain cookies, request headers, and webhook headers, exposing secrets in conversations or logs without redaction.

The payload fields and unconditional output requirement are explicit, with no redaction instruction. Disclosure depends on whether users supply sensitive values.

リスク要因

⚙️ 外部コマンド (50)

🌐 ネットワークアクセス (13)

SKILL.md:93 SKILL.md:41 SKILL.md:5 SKILL.md:40 SKILL.md:52 SKILL.md:62 SKILL.md:65 SKILL.md:73 SKILL.md:76 SKILL.md:82 SKILL.md:92 SKILL.md:93 SKILL.md:105

📁 ファイルシステムへのアクセス (13)

SKILL.md:60 SKILL.md:71 SKILL.md:91 SKILL.md:60 SKILL.md:71 SKILL.md:91 SKILL.md:5 SKILL.md:27 SKILL.md:5 SKILL.md:27 SKILL.md:60 SKILL.md:71 SKILL.md:91

🔑 環境変数 (16)

SKILL.md:60 SKILL.md:71 SKILL.md:91 SKILL.md:60 SKILL.md:71 SKILL.md:91 SKILL.md:25 SKILL.md:31 SKILL.md:53 SKILL.md:60 SKILL.md:64 SKILL.md:71 SKILL.md:75 SKILL.md:83 SKILL.md:91 SKILL.md:108

監査者: codex

このレポートを共有・引用

バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。

バージョン別レポートを開く

レポートリンクをコピー

https://skillstore.io/skills/xcrawl-api-xcrawl/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdownバッジ

[![Skillstore security assessment](https://skillstore.io/badges/skills/xcrawl-api-xcrawl/security.svg)](https://skillstore.io/skills/xcrawl-api-xcrawl?utm_source=security_passport_badge)

HTMLバッジ

<a href="https://skillstore.io/skills/xcrawl-api-xcrawl?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/xcrawl-api-xcrawl/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

埋め込みカード

<iframe src="https://skillstore.io/embed/skills/xcrawl-api-xcrawl.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

学術引用 (APA · BibTeX · CFF)

APA形式の引用

xcrawl-api. (2026). xcrawl security audit report (audit version 1) [Author version 1.0.2]. Skillstore. https://skillstore.io/skills/xcrawl-api-xcrawl/audits/1

BibTeX形式の引用

@techreport{xcrawl-api-xcrawl-api-xcrawl-2026,
  author = {xcrawl-api},
  title = {xcrawl security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/xcrawl-api-xcrawl/audits/1},
  note = {Author version 1.0.2}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "xcrawl security audit report (audit version 1)"
version: "1.0.2"
type: report
authors:
  - name: "xcrawl-api"
date-released: "2026-10-17"
url: "https://skillstore.io/skills/xcrawl-api-xcrawl/audits/1"
identifiers:
  - type: other
    value: "skillstore:xcrawl-api-xcrawl:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore スコア

このスコアの理由証拠の信頼度: 中

アーキテクチャ

100

保守性

コンテンツ

コミュニティ

仕様準拠

作成できるもの

Collect Research Sources

Extract Markdown and links from selected public pages while preserving original responses for source review.

Extract Product Attributes

Request product titles and prices from authorized URLs, defining missing values and required fields before extraction.

Integrate Asynchronous Scraping

Create a scrape task, track its status, and inspect upstream results before integrating them into an application.

これらのプロンプトを試す

Extract One Page

Use XCrawl to extract Markdown from [public URL] synchronously. Keep TLS verification enabled and return the upstream response.

Choose Multiple Formats

Fetch [public URL] with XCrawl and request Markdown plus links. Keep TLS verification enabled. Include task status and available credit usage.

Extract Defined Fields

Extract title, price, and currency from [authorized product URL] using XCrawl JSON extraction. Allow missing prices. Verify option placement and keep TLS verification enabled.

Track an Asynchronous Task

Scrape [authorized URL] asynchronously with [JSON Schema]. Keep TLS verification enabled. Poll at reasonable intervals for at most two minutes. Redact sensitive payload fields.

ベストプラクティス

Confirm URL scope, extraction fields, missing-value rules, and credit expectations before sending requests.
Explicitly enable target TLS verification and redact sensitive cookies, headers, and URL parameters from displayed payloads.
Keep credentials private, use explicit output formats, and apply reasonable polling intervals with a deadline.

回避

Using this single-page endpoint as a substitute for site discovery, site-wide crawling, or keyword search.
Sharing unrestricted request payloads containing session cookies, authorization headers, or webhook secrets.
Accepting disabled TLS verification or polling indefinitely without reviewing security and cost implications.

よくある質問

What must I configure before using the skill?

Create ~/.xcrawl/config.json with your XCRAWL_API_KEY. You also need available XCrawl credits and curl or a compatible Node runtime.

Which AI tools are supported?

The marketplace lists Claude, Codex, and Claude Code. Actual execution depends on the host allowing the required local file access and commands.

Does this skill crawl an entire website?

No. It targets individual pages through XCrawl Scrape and directs map, crawl, or search requests toward dedicated APIs.

Which output formats are documented?

The skill lists HTML, raw HTML, Markdown, links, summary, screenshot, and JSON. Returned fields depend on requested formats and API behavior.

Are requests free?

XCrawl requests consume credits. The skill mentions a free credit plan, but current eligibility and pricing require confirmation with XCrawl.

What security precautions are necessary?

Keep target TLS verification enabled, protect the local configuration file, and redact sensitive request payload fields before sharing results.

開発者情報

作成者

xcrawl-api

ライセンス

MIT

作者バージョン

v1.0.2

Skillstore リビジョン

リポジトリ

https://github.com/xcrawl-api/xcrawl-skills/tree/768158d9cd1e318742845b2eb7b9b37ae75f2c27/skills/xcrawl

参照

e7474dc9298cb48291ba8e94ae55fd5e402b4b85

メンテナンスの新しさ

2026/10/17

利用状況

0 ダウンロード · 0 閲覧

ファイル構成

FirecrawlでWebサイトをクロール

作成者 firecrawl

チームは、手作業でコピーすることなく、多数のページから信頼できるコンテンツを必要としています。このスキルは、スコープ指定されたパス、制限、進捗、保存された結果を使ってFirecrawlのクロールをガイドします。

データ＆アナリティクス表示

xcrawl

自分のエージェントでインストール

エージェントが読めるリソース

テストする

セキュリティ監査

確認済みのセキュリティ上の懸念 (2)

リスク要因

レポートリンクをコピー

Markdownバッジ

HTMLバッジ

埋め込みカード

APA形式の引用

BibTeX形式の引用

CITATION.cff

Skillstore スコア

作成できるもの

Collect Research Sources

Extract Product Attributes

Integrate Asynchronous Scraping

これらのプロンプトを試す

ベストプラクティス

回避

よくある質問

開発者情報

xcrawl-api のその他のスキル

xcrawl-search

xcrawl-map

xcrawl-crawl

xcrawl-scrape

関連スキル

firecrawl

instagram-scraper

data-processing

json-to-llm-context

pangolinfo-amazon-scraper

firecrawl-crawl