Dianping-query
v1.0.0查询大众点评餐厅信息。使用场景：(1) 用户要查询某家餐厅的评分、人均消费、地址 (2) 用户要搜索特定菜系或区域的餐厅推荐 (3) 用户要获取附近美食推荐。登录账号：一定S。重要：搜索时URL需包含城市ID（如hangzhou页面），账号定位北京时需使用URL参数方式绕过。
⭐ 1· 2.1k·6 current·7 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (query Dianping restaurant info) matches the SKILL.md steps: open city URL, run searches, and extract listing fields. No unrelated services, binaries, or credentials are requested.
Instruction Scope
Instructions are narrowly focused on opening Dianping pages, using browser.tabs, and extracting restaurant data. Two points to note: (1) the doc both says '无需登录即可访问杭州地区内容' and also instructs to '确认登录状态' and provides a named account ('一定S'), which is inconsistent and could confuse operators; (2) it tells the agent to prompt the user for a phone number and verification code to log in—this is sensitive user data and outside simple read-only scraping.
Install Mechanism
Instruction-only skill with no install steps and no code files — nothing is written to disk or downloaded by the skill itself.
Credentials
The skill declares no environment variables or secrets, which is proportionate. However, it explicitly expects interactive login flow and requests the user's phone number and verification code if not logged in; this is sensitive and the skill doesn't state how such data is handled or stored.
Persistence & Privilege
No 'always' flag, no requested system persistence, and no explicit credentials are stored by the skill. Model invocation is not disabled (default), so the model could invoke the skill autonomously unless platform-level controls prevent that.
Assessment
This skill appears to do what it says: open Dianping city pages and extract restaurant info. Before installing, confirm you trust the skill's source (no homepage or maintainer info is provided). Be cautious about providing phone numbers or verification codes—prefer logging in yourself in a trusted browser session rather than handing codes to an automated skill. If you don't want the skill invoked autonomously, ask the platform to disable model-initiated calls or set the skill to require explicit user invocation. Finally, if the named account ('一定S') is supposed to be used, ask the publisher why it’s included and whether any credentials will be stored or transmitted.Like a lobster shell, security has layers — review code before you run it.
latestvk9734cp7y9r18zf0h3k4v1wsf580f4cb
License
MIT-0
Free to use, modify, and redistribute. No attribution required.