Skills just-scrape
📦
just-scrape
Content revision r1 Medium Risk ⚙️ External commands🌐 Network access📁 Filesystem access🔑 Env variables
Extract Web Data with Just Scrape
Manual web research and scraping can be slow and inconsistent. This skill guides Claude, Codex, and Claude Code through ScrapeGraph CLI workflows.
Supports: Claude Codex Code(CC)
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "just-scrape" from https://skillstore.io/skills/scrapegraphai-just-scrape.md and its manifest at https://skillstore.io/api/skills/scrapegraphai-just-scrape/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "just-scrape". Scrape a pricing page and summarize the plans.
Expected outcome:
- Saved the raw scrape result under .just-scrape for later review.
- Returned plan names, visible prices, limits, and the source URL.
- Flagged missing details that need manual confirmation.
Using "just-scrape". Find sources about a market topic before analysis.
Expected outcome:
- Returned a ranked source list with titles and URLs.
- Explained why each source looked relevant.
- Suggested which pages should be scraped next.
Using "just-scrape". Monitor a public changelog page.
Expected outcome:
- Created a bounded monitor plan with interval and page format.
- Explained expected credit usage and review steps.
- Listed commands for checking activity and pausing the monitor.
Security Audit
Medium Riskv4 • 7/5/2026 Open versioned report
The static findings are mostly false positives caused by Markdown backticks, documented CLI commands, expected API key names, and example URLs. No prompt injection or covert credential exfiltration was found in SKILL.md. The remaining concern is an unpinned global npm install path for a community CLI package.
1
Files scanned
296
Lines analyzed
0
Review items
0
False positives ignored
Confirmed security concerns (1)
Medium
Unpinned Global Package Installation
The skill advises installing the moving npm package just-scrape@latest globally or through npx. A changing community package can run new install-time code and alter behavior without review.
The install commands are explicit and cite @latest, including a global npm install. This is likely intended setup behavior, but it creates supply-chain and reproducibility risk.
Risk Factors
⚙️ External commands (83)
SKILL.md:4 SKILL.md:23 SKILL.md:25 SKILL.md:29 SKILL.md:31-35 SKILL.md:35-37 SKILL.md:37 SKILL.md:42-45 SKILL.md:45-47 SKILL.md:47-49 SKILL.md:49-63 SKILL.md:63-64 SKILL.md:64-65 SKILL.md:65-66 SKILL.md:66-67 SKILL.md:67-68 SKILL.md:68-69 SKILL.md:69-70 SKILL.md:70-72 SKILL.md:72-76 SKILL.md:76 SKILL.md:77 SKILL.md:78 SKILL.md:82-83 SKILL.md:83-84 SKILL.md:84-90 SKILL.md:90-98 SKILL.md:98-100 SKILL.md:100 SKILL.md:104-117 SKILL.md:117-119 SKILL.md:119 SKILL.md:123-131 SKILL.md:131-133 SKILL.md:133-137 SKILL.md:137-146 SKILL.md:146-148 SKILL.md:148 SKILL.md:152-162 SKILL.md:162-164 SKILL.md:164 SKILL.md:168-174 SKILL.md:174-176 SKILL.md:176 SKILL.md:180-185 SKILL.md:185-189 SKILL.md:189-190 SKILL.md:190-191 SKILL.md:191-192 SKILL.md:192-193 SKILL.md:193-194 SKILL.md:194 SKILL.md:195-196 SKILL.md:196 SKILL.md:200 SKILL.md:202-206 SKILL.md:206-210 SKILL.md:210-216 SKILL.md:216-218 SKILL.md:218 SKILL.md:220-224 SKILL.md:224-226 SKILL.md:226-232 SKILL.md:232-236 SKILL.md:236-242 SKILL.md:242-248 SKILL.md:248-254 SKILL.md:254-257 SKILL.md:257-263 SKILL.md:263 SKILL.md:264 SKILL.md:265 SKILL.md:266-267 SKILL.md:267 SKILL.md:268-275 SKILL.md:275 SKILL.md:276 SKILL.md:281 SKILL.md:290-291 SKILL.md:291 SKILL.md:292 SKILL.md:293 SKILL.md:295
🌐 Network access (5)
📁 Filesystem access (2)
🔑 Env variables (8)
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/scrapegraphai-just-scrape/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/scrapegraphai-just-scrape?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/scrapegraphai-just-scrape?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/scrapegraphai-just-scrape/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/scrapegraphai-just-scrape.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
scrapegraphai. (2026). just-scrape security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/scrapegraphai-just-scrape/audits/4BibTeX citation
@techreport{scrapegraphai-scrapegraphai-just-scrape-2026,
author = {scrapegraphai},
title = {just-scrape security audit report (audit version 4)},
institution = {Skillstore},
year = {2026},
number = {4},
url = {https://skillstore.io/skills/scrapegraphai-just-scrape/audits/4},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "just-scrape security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
- name: "scrapegraphai"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/scrapegraphai-just-scrape/audits/4"
identifiers:
- type: other
value: "skillstore:scrapegraphai-just-scrape:audit:4"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: High 55
Architecture
85
Maintainability
87
Content
68
Community
83
Spec Compliance
What You Can Build
Research Competitor Pages
Find public pages, scrape visible content, and summarize pricing, positioning, or feature changes.
Collect Documentation Content
Crawl a bounded documentation section and save markdown or links for review, migration, or support answers.
Monitor Page Changes
Create recurring checks for public pages and inspect monitor activity when content changes.
Try These Prompts
Scrape One Page
Use just-scrape to scrape this URL as markdown and summarize the main points. Save the raw output under .just-scrape.
Search Before Scraping
Search the web for recent sources about this topic. Return the best sources with titles, URLs, and a short reason for each.
Extract Structured Fields
Extract product names, prices, availability, and source URLs from this page. Use a strict schema and note missing fields.
Crawl and Monitor Safely
Crawl this documentation section with clear page and depth limits. Then suggest a monitor plan for the pages most likely to change.
Best Practices
- Confirm the target URL and data fields before running high-credit operations.
- Set crawl limits and include patterns before scraping site sections.
- Store outputs in .just-scrape and review large files incrementally.
Avoid
- Do not scrape protected pages with session cookies unless the user owns the access.
- Do not run broad crawls or many monitors without explicit limits.
- Do not paste API keys, bearer tokens, or cookies into prompts or logs.
Frequently Asked Questions
Does this skill require an API key?
Yes. It requires SGAI_API_KEY or a ScrapeGraph AI configuration before real requests can run.
Can it scrape JavaScript-heavy pages?
Yes. The skill can guide JavaScript rendering, stealth mode, and scrolling options when simple scraping is incomplete.
Can it return structured data?
Yes. It supports prompt-based extraction and optional schemas for stricter field output.
Where should output files go?
The skill recommends saving raw outputs under .just-scrape and reading large files incrementally.
Can it manage monitors?
Yes. It covers monitor creation, listing, updates, activity checks, pause, resume, and deletion.
How should secrets be handled?
Keep keys, bearer tokens, and cookies in environment variables or secure config. Do not print them in logs or summaries.
Developer Details
Author
scrapegraphaiLicense
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Ref
62e2a730c5cd74eab4c7164309d810de660fcea3
Maintenance freshness
7/18/2026
Usage
6 downloads · 87 views
File structure
📄 SKILL.md