ClawHub

Google Maps Reviews Api Skill

v0.1.2

This skill is designed to help users automatically extract reviews from Google Maps via the Google Maps Reviews API. Agent should proactively apply this skil...

⭐ 2· 1.2k·0 current·0 all-time
byHenk Nie@phheng
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The skill claims to extract Google Maps reviews and its script calls BrowserAct's workflow API (api.browseract.com) with a hard-coded template ID. Requiring a BrowserAct API key is coherent with using that third-party service. No unrelated cloud credentials, system paths, or unrelated binaries are requested.
✓
Instruction Scope
SKILL.md and the script limit actions to: check BROWSERACT_API_KEY, start a BrowserAct workflow, poll for status, and print results. The instructions do not request reading other files, accessing unrelated environment variables, or exfiltrating data to unexpected endpoints. The SKILL.md explicitly tells the agent to ask the user for the API key rather than searching for it.
ℹ
Install Mechanism
This is instruction-only with an included Python script (no install spec), so nothing arbitrary is downloaded or installed by the skill. One practical omission: the script uses the 'requests' library but the skill does not declare Python package dependencies or provide an install step; the environment must already have requests available or the script will fail. This is an operational issue, not an incoherence or direct security risk.
✓
Credentials
Only BROWSERACT_API_KEY is required, which matches the use of the BrowserAct API. No other SECRET/TOKEN/PASSWORD env vars are requested. The script respects the presence/absence of the key and instructs the agent to request it from the user instead of attempting credential discovery.
✓
Persistence & Privilege
always:false and normal autonomous invocation are set. The skill does not attempt to modify agent-wide configuration or persist other credentials. There is no evidence it requests elevated or permanent privileges.
Assessment
The package appears coherent, but before installing consider: 1) This skill relies on a third-party service (BrowserAct). Only provide your BROWSERACT_API_KEY if you trust that service and understand its pricing and privacy terms. 2) Confirm using BrowserAct to scrape or query Google Maps complies with Google’s terms of service and your legal/privacy requirements. 3) Ensure the runtime has Python and the 'requests' package installed (the skill doesn't declare Python deps). 4) If you prefer tighter control, disable autonomous invocation for the agent or require user confirmation before the skill runs. If you need more assurance, ask the author for a dependency list and for confirmation of what the BrowserAct template does with returned data.

Like a lobster shell, security has layers — review code before you run it.

latestvk97dk5n65mvmty6z8v3vbhc5yh8331mw

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🌐 Clawdis
Binspython
EnvBROWSERACT_API_KEY

Comments