📦

xcrawl-scrape

Name: xcrawl-scrape
Author: xcrawl-api

v1.0.2 Ревизия содержимого r1 Высокий риск ⚙️ Внешние команды🌐 Доступ к сети📁 Доступ к файловой системе🔑 Переменные окружения

Extract Web Page Data with XCrawl

Web pages contain content that is difficult to collect in consistent formats. This skill guides XCrawl requests for page content, structured extraction, and asynchronous result retrieval.

Поддерживает: Claude Codex Code(CC)

⚠️ 38 Плохо

Maintain this Skill? Claim it ⚠️ 38 Плохо

Остановитесь и запросите подтверждение перед установкой.

Проверьте план и получите явное согласие пользователя перед изменением файлов.

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента

Review the Skillstore skill "xcrawl-scrape" from https://skillstore.io/skills/xcrawl-api-xcrawl-scrape.md and its manifest at https://skillstore.io/api/skills/xcrawl-api-xcrawl-scrape/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/xcrawl-api-xcrawl-scrape.md Подписанный manifest GET /api/skills/xcrawl-api-xcrawl-scrape/manifest Подписанный lockfile GET /api/skills/xcrawl-api-xcrawl-scrape/lockfile

Протестировать

Использование «xcrawl-scrape». Illustrative request: fetch a public article as Markdown and links, then summarize the result.

Ожидаемый результат:

Illustrative summary: the synchronous scrape completed with Markdown and links.
The response includes the page title, extracted content, outgoing links, and task metadata.
Actual content and credit usage depend on the upstream response.

Использование «xcrawl-scrape». Illustrative request: extract product title, price, and currency asynchronously, then summarize task status.

Ожидаемый результат:

Illustrative summary: the task progressed from pending to completed.
The extracted title is Sample Product, the price is 49, and the currency is USD.
These values are examples, not results from a live scrape.

Аудит безопасности

Высокий риск

v1 • 17.10.2026 Открыть версионный отчет

All 150 static findings describe Markdown syntax, intended API calls, or dedicated configuration access rather than the alleged threats. Two contextual risks remain: disabled target TLS verification by default and unredacted request payloads that can expose supplied credentials. No evidence found of malicious intent, unauthorized credential collection, or embedded prompt injection.

Просканировано файлов

255

Проанализировано строк

Пункты проверки

Ложные срабатывания проигнорированы

Подтверждённые проблемы безопасности (2)

Высокий

SKILL.md:127-128 SKILL.md:165-166 SKILL.md:239-246

Output Contract Can Disclose Supplied Credentials

The output contract requires returning the request_payload used for the request without any redaction instruction. Supported payload fields include cookies, request headers, and webhook headers, which can expose session or callback secrets in conversation history.

The contract explicitly requires the used payload, and sensitive input fields are documented. Disclosure depends on the user supplying secret-bearing values.

Средний

SKILL.md:127-131 SKILL.md:228-230

Target TLS Verification Disabled by Default

The request table documents skip_tls_verification with a true default, while the workflow advises keeping only necessary options. Requests that omit this option can accept invalid target certificates, allowing intercepted content or disclosure of supplied cookies and headers.

The insecure default is explicit in the parameter table, and examples do not override it. Actual provider behavior was not tested.

Факторы риска

⚙️ Внешние команды (50)

🌐 Доступ к сети (13)

SKILL.md:85 SKILL.md:33 SKILL.md:5 SKILL.md:32 SKILL.md:44 SKILL.md:54 SKILL.md:57 SKILL.md:65 SKILL.md:68 SKILL.md:74 SKILL.md:84 SKILL.md:85 SKILL.md:97

📁 Доступ к файловой системе (13)

SKILL.md:52 SKILL.md:63 SKILL.md:83 SKILL.md:52 SKILL.md:63 SKILL.md:83 SKILL.md:5 SKILL.md:19 SKILL.md:5 SKILL.md:19 SKILL.md:52 SKILL.md:63 SKILL.md:83

🔑 Переменные окружения (16)

SKILL.md:52 SKILL.md:63 SKILL.md:83 SKILL.md:52 SKILL.md:63 SKILL.md:83 SKILL.md:17 SKILL.md:23 SKILL.md:45 SKILL.md:52 SKILL.md:56 SKILL.md:63 SKILL.md:67 SKILL.md:75 SKILL.md:83 SKILL.md:100

Аудитор:: codex

Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет

Копировать ссылку на отчёт

https://skillstore.io/skills/xcrawl-api-xcrawl-scrape/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/xcrawl-api-xcrawl-scrape/security.svg)](https://skillstore.io/skills/xcrawl-api-xcrawl-scrape?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/xcrawl-api-xcrawl-scrape?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/xcrawl-api-xcrawl-scrape/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/xcrawl-api-xcrawl-scrape.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Академические ссылки (APA · BibTeX · CFF)

Цитата APA

xcrawl-api. (2026). xcrawl-scrape security audit report (audit version 1) [Author version 1.0.2]. Skillstore. https://skillstore.io/skills/xcrawl-api-xcrawl-scrape/audits/1

Цитата BibTeX

@techreport{xcrawl-api-xcrawl-api-xcrawl-scrape-2026,
  author = {xcrawl-api},
  title = {xcrawl-scrape security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/xcrawl-api-xcrawl-scrape/audits/1},
  note = {Author version 1.0.2}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "xcrawl-scrape security audit report (audit version 1)"
version: "1.0.2"
type: report
authors:
  - name: "xcrawl-api"
date-released: "2026-10-17"
url: "https://skillstore.io/skills/xcrawl-api-xcrawl-scrape/audits/1"
identifiers:
  - type: other
    value: "skillstore:xcrawl-api-xcrawl-scrape:audit:1"
    description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний

Архитектура

100

Сопровождаемость

Контент

Сообщество

100

Соответствие спецификации

Что вы можете построить

Collect Page Content for Research

Retrieve Markdown and links from a public source page, then request a separate summary when needed.

Extract Product Fields

Define product fields and accepted null values before requesting structured extraction from a product page.

Retrieve Rendered Page Evidence

Request a rendered screenshot with a defined viewport and inspect task status and API errors.

Попробуйте эти промпты

Fetch Page Markdown

Fetch [public URL] synchronously with XCrawl and return Markdown plus links. Enable target TLS verification and redact secrets from displayed payloads.

Extract Named Fields

Extract title, price, and currency from [product URL]. Allow null for missing values. Enable target TLS verification and redact secrets from displayed payloads.

Capture a Mobile Screenshot

Request a mobile screenshot of [public URL] with a 402 by 874 viewport. Enable target TLS verification and redact secrets from displayed payloads.

Run Asynchronous Schema Extraction

Scrape [public URL] asynchronously using [JSON Schema]. Enable target TLS verification. Poll with a retry limit until completion or failure. Redact secrets from displayed payloads.

Лучшие практики

Define the authorized URL, required fields, accepted null values, and output formats before making a request.
Set request.skip_tls_verification to false, protect the local key file, and redact sensitive headers and cookies from displayed payloads.
Use bounded asynchronous polling and inspect terminal status, error details, and reported credit usage.

Избегать

Sending private URLs, cookies, or authentication headers to the hosted provider without authorization.
Relying on disabled target TLS verification or exposing secrets through raw payload output.
Polling indefinitely or treating extracted fields as verified facts without checking the source.

Часто задаваемые вопросы

What must I configure before using this skill?

Create ~/.xcrawl/config.json with your XCRAWL_API_KEY and ensure your account has credits. Use curl or a suitable Node runtime.

Which output formats are documented?

The documented formats are HTML, raw HTML, Markdown, links, summary, screenshot, and JSON. Availability depends on the upstream API.

Can I extract specific fields?

Yes. The skill documents extraction prompts and JSON Schema options. Define required fields and how missing values should be handled.

How does asynchronous scraping work?

Create an asynchronous scrape, capture its task identifier, and poll the result endpoint until completion or failure. Set a polling limit.

Does this skill crawl an entire website?

No. It documents single-page scrape requests and result retrieval. Automatic link discovery and full-site crawl management are outside its scope.

What security precautions should I take?

Enable target TLS verification, protect the local key file, and redact secrets from displayed payloads. Only submit data you may share with XCrawl.

Сведения для разработчиков

Автор

xcrawl-api

Лицензия

MIT

Версия автора

v1.0.2

Ревизия Skillstore

Репозиторий

https://github.com/xcrawl-api/xcrawl-skills/tree/768158d9cd1e318742845b2eb7b9b37ae75f2c27/skills/xcrawl-scrape

Ссылка

e7474dc9298cb48291ba8e94ae55fd5e402b4b85

Актуальность поддержки

17.10.2026

Использование

0 загрузок · 0 просмотров

Структура файлов

📄 SKILL.md