Yelp
PassAudited by ClawScan on May 1, 2026.
Overview
The skill is aligned with Yelp search and listing-audit work, and its API use and local memory are disclosed with reasonable safety boundaries.
This skill appears safe to install for Yelp research and audits. Before using API mode, make sure you are comfortable sharing the relevant search details with Yelp and keep your API key out of notes or logs. Periodically review the ~/yelp/ folder if you do not want old location, preference, or shortlist information reused.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Yelp may receive the search details or business identifiers used in API workflows.
The skill uses direct curl calls to live Yelp API endpoints. This is central to the stated purpose and appears read-only, but it means user-provided locations, search terms, phone numbers, or business IDs may be sent to Yelp.
curl -sS -H "Authorization: Bearer ${YELP_API_KEY}" "https://api.yelp.com/v3/businesses/search?..." | jqUse API mode only when appropriate, and confirm before sending sensitive phone numbers, exact addresses, or account-scoped listing data.
If you provide a Yelp API key, the agent can make Yelp API requests using that key and its quota.
The skill can use a Yelp bearer API credential. This is expected for official Yelp API access, and the artifacts include redaction rules, but credential use is still something users should notice.
`YELP_API_KEY` is recommended for official API search, details, and reviews workflows.
Provide only your own Yelp API key when needed, avoid pasting secrets into notes, and revoke or rotate the key if it is ever exposed.
Future Yelp recommendations may be shaped by saved preferences, and local files may contain information about places, categories, or markets you searched.
The skill stores reusable local preferences and decision patterns that can influence future Yelp tasks. The storage is scoped and disclosed, but it may reveal personal local interests or bias later recommendations.
In `~/yelp/memory.md`, store: activation preferences ... recurring cities, categories, and price filters ... accepted and rejected business patterns
Review or delete ~/yelp/ entries when preferences change, and avoid storing sensitive addresses, private plans, or unnecessary personal details.