xcrawl-crawl
Crawl Websites with Bounded XCrawl Jobs
Bulk website collection requires clear crawl boundaries and asynchronous result tracking. This skill guides XCrawl requests, filtering rules, and retrieval of original API responses.
Установить с помощью моего Агента
Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.
Review the Skillstore skill "xcrawl-crawl" from https://skillstore.io/skills/xcrawl-api-xcrawl-crawl.md and its manifest at https://skillstore.io/api/skills/xcrawl-api-xcrawl-crawl/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.
Ресурсы для AI-агентов
Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.
Протестировать
Использование «xcrawl-crawl». Describe an illustrative request for a documentation crawl limited to 20 pages and depth 2.
Ожидаемый результат:
- Illustrative request: documentation paths only, 20-page limit, depth 2, Markdown and links, with TLS verification enabled.
- The create response supplies a task identifier and an initial pending status.
- The result response reports job status, available page data, and credit usage.
Использование «xcrawl-crawl». Describe the expected response delivery when an approved crawl fails. Do not invent live results.
Ожидаемый результат:
- The endpoint flow and submitted request payload accompany the original create and result response bodies.
- Any upstream error details are returned without presenting speculative page counts as completed coverage.
- No derived summary is added unless explicitly requested.
Аудит безопасности
Средний рискAll 132 static findings are false positives involving Markdown, documented configuration, or legitimate XCrawl authentication and API calls. A separate finding concerns the documented default that disables target TLS verification; both usage examples omit a secure override. No evidence found of malicious credential exfiltration, destructive operations, or embedded prompt injection.
Подтверждённые проблемы безопасности (1)
Факторы риска
⚙️ Внешние команды (50)
🌐 Доступ к сети (11)
📁 Доступ к файловой системе (10)
🔑 Переменные окружения (12)
Поделиться и цитировать этот отчет
Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.
Копировать ссылку на отчёт
https://skillstore.io/skills/xcrawl-api-xcrawl-crawl/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportЗначок Markdown
[](https://skillstore.io/skills/xcrawl-api-xcrawl-crawl?utm_source=security_passport_badge)Значок HTML
<a href="https://skillstore.io/skills/xcrawl-api-xcrawl-crawl?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/xcrawl-api-xcrawl-crawl/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Встраиваемая карточка
<iframe src="https://skillstore.io/embed/skills/xcrawl-api-xcrawl-crawl.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Академические ссылки (APA · BibTeX · CFF)
Цитата APA
xcrawl-api. (2026). xcrawl-crawl security audit report (audit version 1) [Author version 1.0.2]. Skillstore. https://skillstore.io/skills/xcrawl-api-xcrawl-crawl/audits/1Цитата BibTeX
@techreport{xcrawl-api-xcrawl-api-xcrawl-crawl-2026,
author = {xcrawl-api},
title = {xcrawl-crawl security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/xcrawl-api-xcrawl-crawl/audits/1},
note = {Author version 1.0.2}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "xcrawl-crawl security audit report (audit version 1)"
version: "1.0.2"
type: report
authors:
- name: "xcrawl-api"
date-released: "2026-10-17"
url: "https://skillstore.io/skills/xcrawl-api-xcrawl-crawl/audits/1"
identifiers:
- type: other
value: "skillstore:xcrawl-api-xcrawl-crawl:audit:1"
description: "Skillstore immutable audit report identifier"
Оценка Skillstore
Почему такая оценка Достоверность доказательств: СреднийЧто вы можете построить
Collect Documentation for Search
Crawl an approved documentation section with path filters and page limits, requesting Markdown and links for later indexing.
Extract Public Research Data
Configure structured extraction for authorized public pages and retrieve the completed job responses for later analysis.
Inspect Rendered Site Content
Request rendered pages and screenshots for a bounded website section, using desktop or mobile viewport settings.
Попробуйте эти промпты
Crawl [approved site URL] with a 10-page limit and depth 1. Request Markdown, keep TLS verification enabled, and return the original responses.
Crawl [approved documentation URL], including only /docs/ paths and excluding /blog/. Limit to 100 pages and depth 2. Request Markdown and links. Keep TLS verification enabled and return original create and result responses.
Crawl [approved site URL] with a 50-page limit and depth 2. Extract [fields] using [schema] and request links. Use [locale] and [device]. Keep TLS verification enabled. Poll until completion or failure and return original responses.
Prepare a crawl for [approved site URL] with [page limit], [depth], and [path filters]. Configure [approved HTTPS webhook] for completed and failed events. Keep external links excluded and TLS verification enabled. Confirm scope before starting. Return original API responses.
Лучшие практики
- Set explicit page limits, depth, and path filters before starting any crawl.
- Keep TLS verification enabled and restrict crawl targets and webhook destinations to approved locations.
- Protect the local API key file and avoid sharing secrets in request payloads, logs, or conversation output.
Избегать
- Starting broad crawls without explicit scope, page limits, or authorization.
- Accepting the documented TLS verification bypass default for ordinary production targets.
- Treating an initial pending status or estimated page count as proof of completed coverage.
Часто задаваемые вопросы
What must I configure before using this skill?
Does the skill run a local crawler?
How can I restrict crawl scope?
Which output formats are documented?
How are asynchronous results retrieved?
What security setting needs attention?
Сведения для разработчиков
Автор
xcrawl-apiЛицензия
MIT
Версия автора
v1.0.2
Ревизия Skillstore
r1
Ссылка
e7474dc9298cb48291ba8e94ae55fd5e402b4b85
Актуальность поддержки
17.10.2026
Использование
0 загрузок · 0 просмотров
Структура файлов
📄 SKILL.md