Craigslist Monitor

PassAudited by ClawScan on May 1, 2026.

Overview

The skill appears to do what it advertises—scrape Craigslist for local business leads and optionally save them—but users should notice its local scraping dependency, scheduled-use option, and persistent storage of scraped listing data.

Before installing, confirm you are comfortable scraping Craigslist, collecting public phone numbers for leads, relying on the referenced local Scrapling environment, and optionally creating a weekly cron job. Review saved leads before outreach and treat Craigslist listing text and links as untrusted external content.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Running the skill will contact Craigslist and may fetch individual ad pages when enrichment is enabled.

Why it was flagged

The scraper makes external Craigslist requests using browser-like headers; this is purpose-aligned but users should understand the network behavior.

Skill content
return Fetcher.get(url, stealthy_headers=True, impersonate='chrome', timeout=30)
Recommendation

Use the scraper intentionally, keep the query scope limited, and ensure your use complies with applicable site rules and outreach policies.

What this means

If the referenced local dependency is missing or has been altered, the skill may fail or behave differently than the reviewed files suggest.

Why it was flagged

The code imports Scrapling from a hardcoded local virtualenv outside the provided skill files, so the effective runtime depends on that local environment.

Skill content
VENV_SITE = '/Users/wlc-studio/StudioBrain/00_SYSTEM/skills/scrapling/.venv/lib/python3.14/site-packages'
Recommendation

Verify the Scrapling environment and package version before use, or package and pin the dependency in a documented install specification.

What this means

Future users or agents may later read untrusted listing text and links from the saved lead list.

Why it was flagged

The skill appends externally scraped Craigslist titles, phone numbers, locations, and links into a persistent local markdown lead list.

Skill content
with open(MASTER_LEAD_LIST, "a") as f:
        f.writelines(lines)
Recommendation

Treat saved listings as untrusted external content, review leads before acting on them, and avoid interpreting ad text as instructions.

What this means

If the cron command is added, the skill will continue running on the schedule without further manual launches.

Why it was flagged

The skill documents an optional recurring cron schedule that would keep scraping and saving leads weekly until removed.

Skill content
openclaw cron add --schedule "0 8 * * MON" --command "python3 ~/StudioBrain/00_SYSTEM/skills/craigslist-monitor/monitor.py --save"
Recommendation

Only add the cron job if recurring monitoring is desired, and document how to review or remove the scheduled task.