mq is a command-line tool for querying and transforming Markdown with syntax modeled on jq, a utility commonly used for processing JSON. It helps developers extract sections, reshape documentation, analyze content, and prepare Markdown for language-model workflows. Its catalogue add-ons support using mq through coding-agent instructions and skills.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add harehare/mq --skill web-scrapinggit clone --depth 1 https://github.com/harehare/mqWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/harehare/mq/web-scraping)<a href="https://agentmods.dev/skills/harehare/mq/web-scraping"><img src="https://agentmods.dev/badge/skills/harehare/mq/web-scraping/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/harehare/mq/web-scraping"><img src="https://agentmods.dev/badge/skills/harehare/mq/web-scraping.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Data Exfiltration · line 52 Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00089 | $0.01473 |
| Opus 5.5 | $0.00036 | $0.00589 |
| Sonnet 5.5 | $0.00018 | $0.00295 |
| Haiku 4.5 | $0.00009 | $0.00147 |
Grade A, and why
web-scraping scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
description: Fetches web pages and extracts structured data using mq's toolchain (mq-crawl for fetching/crawling/JS rendering, mq for HTML-to-Markdown selector-based extraction, http() for in-query requests). Use when th How it starts
The opening of the file, as written. The whole thing — 91 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Web Scraping with mq
Three tools — pick the smallest one that fits:
mq-crawl— fetch/crawl a URL to Markdown, with JS rendering, multi-page crawling, robots.txt handling.mq— filter/transform Markdown or HTML (-I html) with jq-like selectors. Full selector/function reference:processing-markdownskill.mq'shttp()builtin (--allow-net) — make the request inside a query, for casesmq-crawlcan't (POST, custom headers/auth).
mq-crawl sends logs/stats to stderr — redirect with 2>/dev/null when scripting.
Fetch & Extract
mq-crawl --depth 0 https://example.com 2>/dev/null # page as Markdown (--depth 0 = don't follow links)
mq-crawl --depth 0 -q '.h | to_text()' https://example.com 2>/dev/null # inline query, e.g. an outline
-q output is always Markdown/plain text, regardless of -f (which only formats the stats block on stderr, not content). For JSON/table/grep, skip -q and pipe the page into mq instead:
mq-crawl --depth 0 https://example.com 2>/dev/null | mq -F json 'select(.link)' # structured rows
mq-crawl --depth 0 https://example.com 2>/dev/null | mq -F json '.[][]' # table cells
mq-crawl --depth 0 https://example.com 2>/dev/null | mq -F grep --context 2 'select(contains("Pricing"))' # locate text
Filter with select(...) like jq: select(.h.level <= 2), select(.code.lang == "js"), select(contains("keyword")).
JS-Rendered Pages & Multi-Page Crawls
mq-crawl --depth 0 --headless --headless-network-idle https://spa.example.com 2>/dev/null
mq-crawl https://docs.example.com --depth 2 --allowed-domains docs.example.com \
--concurrency 4 -o ./crawled 2>/dev/null
--headlessneeds local Chrome (or--webdriver-urlfor a remote WebDriver).--allowed-domainsis an exact-match domain list, not a wildcard — list every subdomain you want crawled.-o DIRsaves one Markdown file per page instead of stdout; aggregate them withmq -I null --allow-read 'collection("./crawled") | map(self, fn(page): get(page, "title");)' /dev/null(collectionreads from disk, so it requires--allow-read).
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 91 lines · 89 tokens per session scan A 0807cafea37f
web-scraping is a skill published in the GitHub repository harehare/mq (1,060 stars, last pushed today), licensed MIT. It adds 89 tokens to every session and 1,473 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
computer-use
Desktop control that picks the right interface per step — app scripting (AppleScript/JXA), accessibility-first observation and actions, pixel fallback, screenshots, zoom, screen recording, and switching between registered computers. Qualified on macOS; Windows, Linux and HarmonyOS backends are experimental.
webapp-testing
Start/reuse a local app, wait for readiness, inspect rendered state/console/network, act from observed selectors, and verify with evidence.
verify
Drive an engine app headlessly in a pty, record a video of the whole verification, and open a summary page (video + timeline + checks) with pixel open.
Agent Browser Automation
Fast Rust-based headless browser automation CLI with Node.js fallback for AI agents, featuring navigation, clicking, typing, snapshots, and structured commands optimized for agent workflows.
servo-fetch
Fetch and render web pages using the Servo browser engine — a single binary with JS execution, CSS layout, screenshots, and content extraction. Use when a URL returns empty or incomplete content with plain HTTP fetch, when you need a screenshot without GPU, or when you need to run JavaScript in a page context. No…
web-scrape
Extract structured data from web pages using CSS selectors. Use when the user asks to scrape a website, extract text or links from a page, parse HTML content, get data from a table, read article content, collect image URLs, or pull structured information from any web page. Keywords: scrape, extract, parse, crawl, get…