Price Monitor & Daily Excel Report Bot
v1.0.2Monitors product prices across e-commerce sites daily, detects price drops, and emails a formatted Excel report automatically every morning.
⭐ 0· 92·0 current·0 all-time
by@neo1307
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the implementation: Selenium scraping, pandas/openpyxl for Excel, and SMTP for email. Required secrets (SMTP_HOST/PORT/USER/PASS and REPORT_RECIPIENT) are appropriate for sending reports.
Instruction Scope
SKILL.md instructs the agent to read config/urls.txt, run scheduled scraping, save raw data under data/raw, and email reports — all of which the script implements. The instructions do not request unrelated files, system credentials, or external endpoints beyond SMTP.
Install Mechanism
This is an instruction-only skill with no install spec, so nothing is downloaded on install (low install risk). Minor mismatch: SKILL.md lists webdriver-manager as a dependency but the provided script does not use webdriver-manager; the script assumes a usable Chromium + chromedriver environment. Users must ensure host has Chromium and a Chrome driver available for Selenium.
Credentials
Only SMTP credentials and a recipient address are required; this is proportionate to sending report emails. No unrelated secrets or broad cloud credentials are requested.
Persistence & Privilege
always is false and the skill does not request any elevated or persistent system-wide privileges, nor does it modify other skills or system configs. It stores scraped data locally under data/ and reports under data/reports.
Assessment
This skill appears internally consistent and implements what it claims, but review and consider the following before installing:
- SMTP credentials: Use a dedicated sending account and an app-specific password where possible (do not reuse a personal account password). Limit that account's privileges.
- Chromium / ChromeDriver: The script requires a working headless Chromium + chromedriver on the host; SKILL.md mentions webdriver-manager but the script does not use it — ensure your environment supplies a compatible driver.
- Rate limiting & legality: The script scrapes third-party sites; confirm you have the right to scrape the target sites and obey their robots/ToS. The script enforces a 1.2s delay and a 1 req/sec guideline, but you should verify that rate is acceptable for your targets.
- Data storage: Scraped data and reports are written locally under data/raw and data/reports; ensure sensitive data is stored securely and that recipients are correct to avoid accidental data leaks.
- Testing: Run initially with demo/test URLs and with a safe recipient to validate parsing (price extraction is heuristic and may mis-parse some sites). Monitor logs for frequent errors (403s, parsing failures).
- Minor code hygiene: The script imports requests and lists webdriver-manager as required even though neither is used; this likely reflects leftover dependencies rather than malicious intent.
If you need tighter control, consider: restricting the SMTP account, running the scraper in an isolated environment, and auditing the URL list before running.Like a lobster shell, security has layers — review code before you run it.
latestvk977prjc5k0pb5v6w7b1rqt8ys836mzd
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
