sg-property-scraper
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Your network or IP could be subject to website rate limits, blocking, or policy issues when scraping.
The scraper uses browser-like request impersonation and explicitly describes it as bypassing Cloudflare. This is aligned with a scraping tool, but users should be aware it may interact with anti-bot protections or site terms.
# curl_cffi impersonation profile that bypasses Cloudflare IMPERSONATE_PROFILE = "safari17_2_ios"
Use conservatively, avoid excessive page counts, and confirm that scraping the target site is acceptable for your use case.
Installing dependencies could introduce risk if a package or future package version is compromised.
The setup instructions install unpinned Python packages from the package ecosystem. This is common for Python tools, but package versions and provenance are not locked in the artifacts.
pip install curl_cffi beautifulsoup4 lxml
Install in a virtual environment and consider pinning/auditing dependency versions before use.
If you enable commute calculations, your Google API key may incur quota usage or costs.
The skill optionally uses a Google Maps API key for commute calculations. This credential use is purpose-aligned and disclosed, but it grants access to a billable external API.
export GOOGLE_MAPS_API_KEY="your-key-here" # needs Routes API enabled
Use a restricted Google API key with appropriate quotas and only the APIs needed for this skill.
Commute destinations such as a workplace or preferred location may be shared with Google for route calculation.
When commute calculation is used, destination/location information is sent to Google Routes API. This external provider flow is disclosed and purpose-aligned.
Uses Google Routes API (`computeRouteMatrix`) - Calculates driving time ... and transit time ...
Avoid using sensitive personal addresses unless you are comfortable sending them to Google Routes API.