📦 Crawl4ai Docker Skill — 容器化爬虫
v1.0.0一键拉起 Docker 容器，提供 REST API 的智能网页爬取与数据提取服务，支持动态渲染、内容清洗和结构化输出，让大规模数据采集即插即用。
0· 103·0 当前·0 累计
by 下载技能包
最后更新
2026/3/28
安全扫描
OpenClaw
可疑
medium confidenceThe skill appears to be a documented Dockerized web crawler (what it says) but the package metadata and runtime instructions disagree about required environment variables and binaries, and the skill enables arbitrary web crawling which can access internal networks — review before installing.
评估建议
This package appears to be legitimate documentation and helper scripts for running a Dockerized Crawl4AI service, but there are a few things to check before installing:
- Metadata mismatch: the skill's SKILL.md tells you to create a .llm.env containing LLM API keys (OPENROUTER_API_KEY, OPENAI_API_KEY, etc.), but the registry metadata does not declare any required environment variables. Treat LLM API keys as sensitive — only provide them if you trust the Crawl4AI image and its source.
- Missing...详细分析 ▾
ℹ 用途与能力
Name/description match the files: this is a Dockerized Crawl4AI crawler that exposes a REST API and supports LLM-based extraction. That purpose justifies the examples, endpoints, and LLM provider configuration shown in SKILL.md and example-config.json.
⚠ 指令范围
SKILL.md and scripts instruct the agent/user to run curl requests against a local service, create a .llm.env with LLM API keys, and call endpoints that can execute JS (/execute_js). The runtime instructions will cause the service to fetch arbitrary URLs (user-supplied), which can reach internal network hosts if the service runs in a permissive network environment. The docs reference reading .llm.env values not declared in the registry metadata (see environment_proportionality).
✓ 安装机制
There is no install spec (instruction-only plus utility scripts). Nothing is downloaded or extracted by the skill bundle itself, so no high-risk install actions are present in the package.
⚠ 凭证需求
SKILL.md documents LLM API keys (OPENROUTER_API_KEY, OPENAI_API_KEY, etc.) and instructs creating .llm.env, but the registry metadata lists no required environment variables or primary credential. The scripts also assume binaries (curl, jq, maybe open) but the skill metadata doesn't declare required binaries. This mismatch between documentation and declared requirements is a coherence issue and a potential operational risk.
✓ 持久化与权限
always is false and the skill does not request elevated platform privileges. It does not modify other skills or global configuration in the bundle. Normal autonomous invocation is allowed (default) but not combined with other high-risk flags.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/28
Initial release of crawl4ai-docker-skill. - Provides a Dockerized web crawling and scraping service with a full REST API. - Includes intelligent content extraction using LLM optimization. - Features real-time monitoring with built-in dashboard and API endpoints. - Supports advanced operations like webpage screenshots and PDF generation. - Flexible browser and LLM provider configuration. - Comprehensive usage examples and troubleshooting included in documentation.
● 无害
安装命令
点击复制官方npx clawhub@latest install crawl4ai-docker-skill
镜像加速npx clawhub@latest install crawl4ai-docker-skill --registry https://cn.longxiaskill.com