Business Listing Aggregator

• Risk level: Low
• Analyzed: Apr 25, 2026, 5:08 PM
• Findings: 0
• Version: 1.4.0

Overview

The skill's code, instructions, and requested configuration are consistent with a listing-audit scraper that optionally uses a Google Places API key; nothing in the package indicates hidden exfiltration or unrelated credential requests.

This skill appears to be what it says: a multi-platform listing auditor that scrapes search pages and can optionally use Google Places for structured results. Before installing or running it, consider: 1) Legal/ToS: scraping may violate site Terms of Service — only audit businesses you own or have written permission to audit (the SKILL.md also warns this). 2) Reliability & blocking: the tool uses simple browser-like headers and basic rate delays; heavy or frequent use can get your IP blocked. Use a proper API key (Google Places) when possible. 3) Privacy: results can contain phone numbers and addresses (PII). Ensure you have the right to collect/store that data and protect any reports you write to disk. 4) Review & sandbox: although no exfiltration endpoints are present, review the full code (the truncated portion in the package) and run it in a restricted/sandboxed environment if you’re concerned. 5) Accuracy & maintenance: HTML scraping via regex is brittle; expect false negatives and maintain the PLATFORMS patterns as sites change. If you need automated, high-volume, or commercial audits, prefer official APIs and rate-limited architectures.