ClawHub

Irish Takeaway Finder

v1.0.0

Find nearby takeaways in Ireland and browse menus via Deliveroo/Just Eat. Uses Google Places API for discovery and browser automation for menu scraping.

⭐ 1· 1.7k·1 current·1 all-time
by@cotyledonlab
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (find takeaways, browse menus) align with required binary (goplaces) and the single required env var (GOOGLE_PLACES_API_KEY). Asking for goplaces and a Google API key is proportionate for place discovery.
✓
Instruction Scope
SKILL.md directs the agent to run goplaces searches and to perform browser automation against Deliveroo/Just-Eat for menu scraping (accept cookies, enter address, click restaurant, snapshot). Those steps are within the stated purpose; they do instruct the agent to access external websites (expected for scraping) but do not request unrelated system files or credentials.
✓
Install Mechanism
There is no install spec (instruction-only) and the README points to installing goplaces via a known Homebrew tap. The included shell script is small and simply maps locations to coords and invokes goplaces; no downloads or archive extraction occur.
✓
Credentials
Only GOOGLE_PLACES_API_KEY is required and used by the provided script. No other credentials, tokens, or unrelated env vars are requested. The use of a Google API key is justified by the skill's functionality.
✓
Persistence & Privilege
Skill does not request always:true, does not modify other skills or system-wide configs, and is user-invocable. It relies on runtime browser automation but does not request elevated or persistent privileges.
Assessment
This skill appears coherent and limited to its stated task, but review these practical points before installing: (1) KEEP your GOOGLE_PLACES_API_KEY secret and only provide a key with appropriate quota/restrictions. (2) Verify the goplaces source (brew tap steipete) before installing to ensure you trust the binary. (3) Browser automation will visit Deliveroo/Just-Eat and extract page content — ensure this usage complies with those sites' terms of service. (4) The skill's source/homepage is unknown; if you need stronger assurance, ask the publisher for a repository URL or checksum for the included files. If you don't want an agent accessing the web autonomously, restrict its invocation or browser tool access.

Like a lobster shell, security has layers — review code before you run it.

latestvk97b4qkn979p3dayv37yysqdmn7zbkv5

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🍕 Clawdis
Binsgoplaces
EnvGOOGLE_PLACES_API_KEY

Comments