技能 web-search-scraper-api-skill
📦

web-search-scraper-api-skill

内容修订 r2 高风险 🌐 网络访问🔑 环境变量⚙️ 外部命令

将网页提取为 Markdown

网页研究通常需要从页面中获取干净文本，但手动复制既慢又不一致。此技能会将目标 URL 发送到 BrowserAct，并返回提取出的 Markdown，以便审阅或复用。

支持: Claude Codex Code(CC)
⚠️ 38 差

使用我的智能体安装

将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。

智能体请求
Review the Skillstore skill "web-search-scraper-api-skill" from https://skillstore.io/skills/browser-act-web-search-scraper-api-skill.md and its manifest at https://skillstore.io/api/skills/browser-act-web-search-scraper-api-skill/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

你的智能体仍应展示其计划，并按安全策略请求必要确认。

Agent 可读资源

当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。

Markdown 详情 GET /skills/browser-act-web-search-scraper-api-skill.md 已签名 manifest GET /api/skills/browser-act-web-search-scraper-api-skill/manifest 已签名 lockfile GET /api/skills/browser-act-web-search-scraper-api-skill/lockfile

测试它

正在使用“web-search-scraper-api-skill”。 一个公开博客文章 URL。

预期结果:

包含页面标题、各级标题、段落、链接和可读文章内容的 Markdown 文档。

正在使用“web-search-scraper-api-skill”。 一个公开产品文档页面。

预期结果:

适合用于笔记、搜索索引或后续总结的干净 Markdown。

正在使用“web-search-scraper-api-skill”。 用于监控的已批准公开页面。

预期结果:

可与之前捕获内容进行比较的提取页面文本。

安全审计

高风险
v6 • 2026/7/23 打开版本化报告

The expected BrowserAct requests and scoped environment read are confirmed low-risk behaviors. Most high and medium scanner hits are names or Markdown formatting. The guidance still exposes secrets and untrusted scraped content to agent workflows.

2
已扫描文件
173
分析行数
6
复核项
0
已忽略误报

已确认安全问题 (2)

高
SKILL.md:20-22scripts/web_search_scraper_api.py:92-97
Credential Solicitation in Agent Guidance
The skill says to ask users to provide the API key and wait. This can expose credentials in conversation history and model processing.
Both files explicitly direct the user to provide an API key instead of requiring secure environment configuration.
高
SKILL.md:47-49scripts/web_search_scraper_api.py:69-79
Untrusted Web Content Returned Without Isolation
The skill prints arbitrary webpage content directly for agent consumption. Embedded instructions can cause indirect prompt injection if treated as trusted guidance.
The documented output is complete webpage Markdown, and the script returns it without labeling, filtering, or instruction-boundary controls.
能力复核项 (6)

这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。

低
scripts/web_search_scraper_api.py:29
Python HTTP libraries
res = requests.post(f"{API_BASE_URL}/run-task-by-template", json=payload, headers=headers, timeout=3
This line sends an authenticated POST request and the user-supplied target URL to the fixed BrowserAct API. The outbound request is expected but real.
低
scripts/web_search_scraper_api.py:46
Python HTTP libraries
status_res = requests.get(f"{API_BASE_URL}/get-task-status?task_id={task_id}", headers=headers, time
This line polls task status through an authenticated request to BrowserAct. It is intentional network access with a fixed destination.
低
scripts/web_search_scraper_api.py:69
Python HTTP libraries
task_info = requests.get(f"{API_BASE_URL}/get-task?task_id={task_id}", headers=headers, timeout=30).
This line retrieves task results from BrowserAct through an authenticated request. It is required behavior but crosses an external network boundary.
低
scripts/web_search_scraper_api.py:15
Hardcoded URL
API_BASE_URL = "https://api.browseract.com/v2/workflow"
The hardcoded HTTPS URL defines the external BrowserAct endpoint used by later requests. Its fixed value limits the destination but confirms a network dependency.
低
scripts/web_search_scraper_api.py:86
Python getenv function
api_key = os.getenv("BROWSERACT_API_KEY")
The script reads the documented BROWSERACT_API_KEY environment variable. The access is narrowly scoped but handles a sensitive credential.
低
scripts/web_search_scraper_api.py:86
getenv function call
api_key = os.getenv("BROWSERACT_API_KEY")
The getenv call reads only the documented BrowserAct credential. This is expected environment access, but the detected access is real.

风险因素

🌐 网络访问 (7)
scripts/web_search_scraper_api.py:29 scripts/web_search_scraper_api.py:46 scripts/web_search_scraper_api.py:69 scripts/web_search_scraper_api.py:15 scripts/web_search_scraper_api.py:95 SKILL.md:22 SKILL.md:30
🔑 环境变量 (10)
scripts/web_search_scraper_api.py:86 scripts/web_search_scraper_api.py:86 scripts/web_search_scraper_api.py:17 scripts/web_search_scraper_api.py:18 scripts/web_search_scraper_api.py:86 scripts/web_search_scraper_api.py:92 scripts/web_search_scraper_api.py:97 scripts/web_search_scraper_api.py:102 SKILL.md:4 SKILL.md:20
⚙️ 外部命令 (9)
SKILL.md:20 SKILL.md:28 SKILL.md:30 SKILL.md:35-38 SKILL.md:38-41 SKILL.md:41-49 SKILL.md:49-55 SKILL.md:55-56 SKILL.md:56
审计者: codex 查看审计历史 →
分享与引用此报告

分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。

打开版本化报告
安全评估

复制报告链接

https://skillstore.io/skills/browser-act-web-search-scraper-api-skill/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/browser-act-web-search-scraper-api-skill/security.svg)](https://skillstore.io/skills/browser-act-web-search-scraper-api-skill?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/browser-act-web-search-scraper-api-skill?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/browser-act-web-search-scraper-api-skill/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/browser-act-web-search-scraper-api-skill.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
学术引用 (APA · BibTeX · CFF)

APA 引用

browser-act. (2026). web-search-scraper-api-skill security audit report (audit version 6) [Author version unspecified]. Skillstore. https://skillstore.io/skills/browser-act-web-search-scraper-api-skill/audits/6

BibTeX 引用

@techreport{browser-act-browser-act-web-search-scraper-api-skill-2026, author = {browser-act}, title = {web-search-scraper-api-skill security audit report (audit version 6)}, institution = {Skillstore}, year = {2026}, number = {6}, url = {https://skillstore.io/skills/browser-act-web-search-scraper-api-skill/audits/6}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "web-search-scraper-api-skill security audit report (audit version 6)" version: "unspecified" type: report authors: - name: "browser-act" date-released: "2026-07-23" url: "https://skillstore.io/skills/browser-act-web-search-scraper-api-skill/audits/6" identifiers: - type: other value: "skillstore:browser-act-web-search-scraper-api-skill:audit:6" description: "Skillstore immutable audit report identifier"

Skillstore 评分

评分依据 证据置信度: 中
45
架构
85
可维护性
87
内容
69
社区
83
规范符合性

你能构建什么

捕获文章文本

从公开文章中提取干净的 Markdown，用于研究笔记或来源审阅。

转换文档页面

将公开文档页面转换为 Markdown，以便离线阅读或建立索引。

监控公开内容

从已批准的 URL 收集页面文本，以便后续比较变更。

试试这些提示

提取单个页面 
Extract Markdown from this public URL: [URL]. Tell me if the page cannot be accessed.
转换文档 
Convert this public documentation page to Markdown and keep headings, lists, and links clear: [URL].
总结提取内容 
Extract Markdown from [URL], then summarize the main sections and note any missing or unreadable content.
处理已批准的 URL 
For these approved URLs, extract Markdown one at a time, summarize changes, and stop if authentication, paywall, or permission issues appear.

最佳实践

  • 仅使用你被允许访问和处理的 URL。
  • 将 BROWSERACT_API_KEY 存储在环境中，不要放在聊天或共享文件里。
  • 在发布、索引或引用提取出的 Markdown 之前先进行审阅。

避免

  • 不要将 API key 粘贴到聊天或共享日志中。
  • 不要使用此技能绕过付费墙、验证或地理围栏。
  • 未经明确许可，不要抓取私有或需要身份验证的页面。

常见问题

此技能会提取什么？
当 BrowserAct 工作流成功时，它会提取可读网页内容并以 Markdown 形式返回。
它需要 API key 吗？
是的。脚本运行前需要在环境中提供 BROWSERACT_API_KEY。
页面在哪里处理？
脚本会将目标 URL 发送到 BrowserAct API，由其运行托管的提取工作流。
它能抓取任何网站吗？
它可以接受 HTTP 或 HTTPS URL，但用户必须遵守网站条款、隐私规则和访问权限。
提取需要多长时间？
脚本最多轮询五分钟，并在托管任务运行期间打印状态消息。
输出总是完整的吗？
不是。动态页面、被阻止的内容、身份验证、付费墙或服务错误都可能降低提取质量或导致无法提取。

开发者详情

许可证

MIT

Skillstore 修订

r2

版本提示

作者未声明版本。

仓库

https://github.com/browser-act/skills/tree/main/solutions/search-research/web-search-scraper-api-skill

引用

a39a91716eadede5f4cdefd78178fed4e837a128

维护新鲜度

2026/7/25

使用量

12 次下载 · 106 次浏览

文件结构

📁 scripts/

📄 web_search_scraper_api.py

📄 SKILL.md

browser-act 的更多技能

查看全部

相关技能

查看全部