Recipe Scout — Chinese Recipes

PassAudited by VirusTotal on May 11, 2026.

Overview

Type: OpenClaw Skill Name: recipe-scout Version: 1.0.0 The recipe-scout skill is a well-structured tool for searching and normalizing Chinese recipes from reputable sources (e.g., xiachufang.com, HowToCook GitHub) and exporting them to Obsidian markdown files. The instructions in SKILL.md focus on data quality, anti-hallucination, and proper source attribution. No malicious behaviors such as data exfiltration, unauthorized command execution, or harmful prompt injections were found; file system access is limited to saving recipe notes in designated paths like /home/node/vault/Recipes/Chinese/.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may send recipe-related searches and page fetches to external websites or search providers.

Why it was flagged

The skill explicitly directs the agent to use external web retrieval tools. This is expected for recipe scouting and is paired with source-ranking and anti-scraping guidance.

Skill content
**Prefer:** `web_search` (Brave Search API) + `web_fetch` for structured recipe pages
Recommendation

Use public recipe sources where possible and avoid asking the agent to access pages that require sensitive logins or private accounts.

What this means

If a browser profile is logged in, the agent could view recipe pages as that account while researching.

Why it was flagged

The browser fallback may rely on a session or browser profile. The artifacts do not show credential extraction or account mutation, but users should notice that authenticated browsing could be involved.

Skill content
**Use browser only when:** page requires JS rendering, login/session, or video transcript interaction
- If Chrome relay is unstable  switch to `openclaw` browser profile
Recommendation

Only allow browser/session use with explicit user intent, prefer an isolated browser profile, and do not use it for private feeds, paywalled content, or unrelated accounts.

What this means

Saved recipe notes and source links will remain on disk and may be included in any Obsidian sync or future vault use.

Why it was flagged

The skill can create persistent markdown notes in an Obsidian vault, but only when export is requested and within a recipe-specific path.

Skill content
If export requested  write Obsidian note(s), return file paths
Recommendation

Review the destination path and note contents before exporting, especially if the vault is synced or shared.