feat: add Webclaw plugin 0.1.0

[0xMassi]

Plugin Submission

Plugin information

• Author: 0xmassi
• Plugin name: Webclaw
• Version: 0.1.0
• Source repository: https://github.com/0xMassi/webclaw-dify
• Contact: privacy@webclaw.io

Submission type

• New plugin
• Version update

What changed

Adds six Webclaw tools to Dify: Scrape, Search, Map, Extract, Summarize, and Batch. Each tool calls the hosted Webclaw API with the API key configured in the provider settings.

Risk level

• Low risk
• Medium risk
• High risk

The plugin accepts public URLs selected by the user and asks the Webclaw API to fetch or crawl them.

Required checks

• I have read and followed the Marketplace submission requirements.
• I have read and comply with the Plugin Developer Agreement.
• I tested this plugin on Dify Community Edition and Dify Cloud, or documented any limitation below.
• The package contains only files needed at runtime.
• The package does not contain secrets, local credentials, .env files, .git directories, virtual environments, caches, logs, or IDE files.
• The package does not contain executables or bundled binaries, or I explained why they are required below.
• The plugin README includes setup steps, usage instructions, required APIs or credentials, connection requirements, and the source repository link.
• The plugin includes PRIVACY.md or a hosted privacy policy, and manifest.yaml references it.
• All user-facing text is primarily in English, with any localized README files following the i18n guidance.

Security and privacy notes

• User-supplied URLs, search queries, extraction prompts, and schemas are sent to https://api.webclaw.io.
• The configured Webclaw API key is sent only as a bearer credential to api.webclaw.io; the plugin does not log or return it.
• The plugin declares only api.webclaw.io as its outbound network domain.
• Security boundary: the hosted API rejects private and internal destinations, including redirects to those addresses.
• HTTP requests use a 120-second timeout.
• Responses omit internal routing fields such as engine and antibot while preserving user-requested nested data.
• Webclaw may fetch or crawl public user-selected URLs, which is why this submission is marked high risk.

Local validation

The following checks passed on the exact 0.1.0 package:

pytest: 10 passed
compileall: passed
dify-plugin package: passed
Marketplace package validators: passed with no blocking findings
Marketplace install validator: plugin daemon started and local health endpoint passed
Marketplace uploader --test: passed

Dify Cloud: Scrape, Search, Map, Extract, Summarize, and Batch all completed successfully against public test inputs.

Dify Community Edition limitation: I did not run a full UI workflow. The official Marketplace install validator started the packaged plugin and reached its local daemon health endpoint.

Reviewer notes

The package contains 24 files, no executables or bundled binaries, and approximately 29 KB of unpacked content.