Навыки extract
📦

extract

Ревизия содержимого r1 Высокий риск ⚡ Содержит скрипты⚙️ Внешние команды📁 Доступ к файловой системе

Extract Structured Website Data with Playwright

Dynamic websites make reliable data extraction difficult. This skill discovers selectors, handles common loading patterns, and produces reusable Playwright scripts with structured output.

Поддерживает: Claude Codex Code(CC)
⚠️ 38 Плохо

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента
Review the Skillstore skill "extract" from https://skillstore.io/skills/actionbook-extract.md and its manifest at https://skillstore.io/api/skills/actionbook-extract/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/actionbook-extract.md Подписанный manifest GET /api/skills/actionbook-extract/manifest Подписанный lockfile GET /api/skills/actionbook-extract/lockfile

Протестировать

Использование «extract». Extract product name, current price, and product link from the first five catalog pages.

Ожидаемый результат:

Created a reusable Playwright script and a JSON dataset containing 240 products. Validation found complete names and links, with three missing prices.

Использование «extract». Collect article titles and authors from an infinite-scroll publication feed.

Ожидаемый результат:

  • Generated a bounded scroll workflow that stops after three rounds without new records.
  • Extracted 618 unique articles and checked the first and last visible records.
  • Saved the dataset and reported the script path, data path, and record count.

Использование «extract». Export a public results table to CSV with date, category, and score columns.

Ожидаемый результат:

Produced a CSV with the requested columns and a rerunnable extraction script. All declared fields exceeded the configured completeness threshold.

Аудит безопасности

Высокий риск
v1 • 15.08.2026 Открыть версионный отчет

The Playwright eval APIs, Markdown backticks, and reconnaissance matches are false positives rather than dynamic or shell code execution. The fixed output path can overwrite an existing file. Untrusted webpage content and shell placeholder interpolation create additional injection risks that require safeguards.

1
Просканировано файлов
367
Проанализировано строк
2
Пункты проверки
0
Ложные срабатывания проигнорированы

Подтверждённые проблемы безопасности (2)

Высокий
SKILL.md:224-254
Untrusted Web Content Reaches Agent Context
The workflow inspects browser snapshots and page text without requiring the agent to ignore instructions embedded in webpage content. A hostile page could attempt indirect prompt injection.
The cited workflow explicitly retrieves snapshots and page text for agent-guided selector discovery. No instruction separates webpage data from trusted operational instructions.
Высокий
SKILL.md:184-200SKILL.md:218-254
Shell Placeholder Injection Risk
The workflow places user-derived URLs and selectors into quoted shell command templates without validation or escaping requirements. Crafted values could alter commands when materialized and executed.
The skill derives URLs and fields from user requests, then inserts placeholders into executable shell examples. Robust argument separation or escaping is not required.
Пункты проверки возможностей (2)

Это реальные локальные возможности, которые могут ожидаться для этого навыка, поэтому они требуют проверки, но не считаются подтверждённым вредоносным поведением.

Средний
SKILL.md:301
Node.js fs operations
fs.writeFileSync('output.json', JSON.stringify(data, null, 2));
The generated template synchronously writes to the fixed path output.json without checking whether it exists. This expected output step can overwrite an existing file in the working directory.
Средний
SKILL.md:301
Synchronous file operations
fs.writeFileSync('output.json', JSON.stringify(data, null, 2));
The generated template synchronously writes to the fixed path output.json without checking whether it exists. This expected output step can overwrite an existing file in the working directory.

Факторы риска

⚡ Содержит скрипты (5)
SKILL.md:84 SKILL.md:119 SKILL.md:143 SKILL.md:153 SKILL.md:293
⚙️ Внешние команды (50)
SKILL.md:20 SKILL.md:27-38 SKILL.md:38-44 SKILL.md:44-45 SKILL.md:45-48 SKILL.md:48 SKILL.md:58-65 SKILL.md:65-67 SKILL.md:67 SKILL.md:73-100 SKILL.md:100-102 SKILL.md:102 SKILL.md:108-129 SKILL.md:129-137 SKILL.md:137-180 SKILL.md:180-194 SKILL.md:194-200 SKILL.md:200-204 SKILL.md:204 SKILL.md:205-206 SKILL.md:206-207 SKILL.md:207 SKILL.md:208 SKILL.md:210-221 SKILL.md:221-228 SKILL.md:228-232 SKILL.md:232-236 SKILL.md:236-240 SKILL.md:240-244 SKILL.md:244-254 SKILL.md:254-257 SKILL.md:257-258 SKILL.md:258-264 SKILL.md:264-267 SKILL.md:267-270 SKILL.md:270-272 SKILL.md:272 SKILL.md:276-302 SKILL.md:302-306 SKILL.md:306-312 SKILL.md:312-314 SKILL.md:314-324 SKILL.md:324-331 SKILL.md:331-338 SKILL.md:338-342 SKILL.md:342 SKILL.md:343-349 SKILL.md:349-353 SKILL.md:353-354 SKILL.md:354-362
📁 Доступ к файловой системе (2)
SKILL.md:301 SKILL.md:301
Аудитор:: codex
Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет
Оценка безопасности

Копировать ссылку на отчёт

https://skillstore.io/skills/actionbook-extract/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/actionbook-extract/security.svg)](https://skillstore.io/skills/actionbook-extract?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/actionbook-extract?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/actionbook-extract/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/actionbook-extract.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Академические ссылки (APA · BibTeX · CFF)

Цитата APA

actionbook. (2026). extract security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/actionbook-extract/audits/1

Цитата BibTeX

@techreport{actionbook-actionbook-extract-2026, author = {actionbook}, title = {extract security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/actionbook-extract/audits/1}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "extract security audit report (audit version 1)" version: "unspecified" type: report authors: - name: "actionbook" date-released: "2026-08-15" url: "https://skillstore.io/skills/actionbook-extract/audits/1" identifiers: - type: other value: "skillstore:actionbook-extract:audit:1" description: "Skillstore immutable audit report identifier"

Сравнить варианты

3 устанавливаемых вариантов

Навык каждого автора остаётся отдельным устанавливаемым вариантом. Рекомендуемый вариант ранжируется по данным Skillstore.

Почему этот вариант первый

Самая высокая оценка Skillstore
pbakaus Рекомендуется

pbakaus-extract

Оценка Skillstore 79
Достоверность доказательств Высокий
Использование в Skillstore 12
Обновлено

2026-09-09

tavily-ai

tavily-ai-extract

Оценка Skillstore 38
Достоверность доказательств Средний
Использование в Skillstore 10
Обновлено

2026-09-09

actionbook Текущий

actionbook-extract

Оценка Skillstore 38
Достоверность доказательств Средний
Использование в Skillstore 2
Обновлено

2026-09-09

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний
55
Архитектура
85
Сопровождаемость
87
Контент
65
Сообщество
83
Соответствие спецификации

Что вы можете построить

Collect Product Catalogs

Extract product names, prices, availability, and links from paginated or dynamically loaded catalog pages.

Build Research Datasets

Collect titles, authors, dates, and metadata from public search results or publication listings.

Monitor Operational Listings

Create a repeatable script for collecting authorized job, property, event, or dashboard records.

Попробуйте эти промпты

Extract a Simple List 
Extract [fields] from [URL]. Save the records as [JSON or CSV] and provide a reusable Playwright script.
Collect Paginated Results 
Extract [fields] from every results page at [URL]. Stop after [maximum pages] and validate the first and last records.
Handle Dynamic Loading 
Extract [fields] from [URL]. Detect hydration, infinite scrolling, or virtualization, then use bounded waits and scrolling to collect unique records.
Create a Validated Repeatable Workflow 
Build and run an authorized extractor for [URL]. Use stable selectors, protect existing files, enforce limits, and report completeness checks and caveats.

Лучшие практики

  • Use stable semantic selectors and verify them against a small page sample before full extraction.
  • Set maximum pages, scrolls, and timeouts for every dynamic collection loop.
  • Use authorized targets and review extracted fields for personal or sensitive information.

Избегать

  • Do not bypass authentication, CAPTCHAs, access controls, or website restrictions.
  • Do not interpolate untrusted URLs or selectors into shell commands without robust argument handling.
  • Do not overwrite existing output files without explicit user confirmation.

Часто задаваемые вопросы

What does this skill produce?
It produces a standalone Playwright script and extracted data in JSON, CSV, or another requested format.
Does the generated script require Actionbook?
No. The generated script requires Node.js and Playwright, but it does not require Actionbook at runtime.
Can it handle infinite scrolling?
Yes. It can detect growth, collect unique records, and stop after configured scroll or no-growth limits.
Can it extract authenticated pages?
It may use the user browser session for authorized content, but users must protect credentials and follow access policies.
How does it validate results?
It checks successful execution, output presence, record count, field completeness, and sample records against visible page content.
What happens when selectors stop working?
The workflow can refresh snapshots, inspect the current page, update selectors, rerun the script, and report remaining gaps.

Сведения для разработчиков

Автор

actionbook

Лицензия

MIT

Ревизия Skillstore

r1

Примечание о версии

Автор не указал версию.

Репозиторий

https://github.com/actionbook/actionbook/tree/5a3eb05ec18fcebc09ef771008d6dda649295765/skills/extract

Ссылка

7fc57fb4532f9ea45a9e19def4e06cab71f7343a

Актуальность поддержки

16.08.2026

Использование

0 загрузок · 0 просмотров

Структура файлов

📄 SKILL.md