Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Restaurant Lead Generator
v0.1.0Automated restaurant lead generation and outreach for SMB sales. Use when you need to find restaurant leads, enrich business data (website, phone, address),...
⭐ 0· 63·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
The description promises discovery, enrichment, and automated outreach (Google Maps/Yelp scraping, SMTP, WhatsApp Business API). However, the included script (generate_leads.py) only synthesizes random sample leads and does not implement scraping, data enrichment, or any networked outreach. The skill also mentions SeleniumBase and browser automation but provides no declared dependencies or install steps. This mismatch suggests the package is incomplete or misleading about its capabilities.
Instruction Scope
SKILL.md explicitly directs scraping Google Maps and Yelp via browser automation and to send outreach via SMTP or the WhatsApp Business API. Those are operations that require careful handling of credentials, rate-limiting, and legal/terms-of-service concerns. The SKILL.md also includes a Selenium code snippet, but the actual shipped script does not perform these actions. The instructions are vague and grant broad discretion (e.g., 'Use SeleniumBase or browser automation') without constraints or safety guidance.
Install Mechanism
There is no install specification (instruction-only skill) and no declared dependencies, yet the documentation references SeleniumBase and browser automation. Absence of install instructions or dependency listing is inconsistent but not itself high-risk; it means a user would need to install these tools manually. No external downloads, taps, or archives are present in the manifest.
Credentials
The skill requests no environment variables or credentials, yet SKILL.md describes using SMTP and the WhatsApp Business API (which require credentials) and scraping flows that might need API keys or proxies. That mismatch is problematic: either required sensitive credentials are omitted from the manifest (hidden/undeclared), or the skill cannot actually perform the stated outreach. Additionally the generated phone numbers and country codes in the script do not consistently match all target regions (e.g., Peru listed but script uses +1-style numbers), indicating sloppy/incoherent data handling.
Persistence & Privilege
The skill is not flagged as always: true and uses default autonomy settings. It does not request elevated or persistent platform privileges and does not modify other skill configurations according to the provided manifest.
What to consider before installing
Key points before installing or using this skill:
- Expect to provision extra tooling and credentials: the README references Selenium, SMTP and WhatsApp Business API but the manifest declares no installs or env vars. You will need to install browser automation libraries and provide SMTP/WhatsApp credentials yourself.
- The included script only generates synthetic sample leads (randomized names/addresses/phones); it does not implement scraping, enrichment, or outreach. If you expected automated scraping or messaging, this package is incomplete or a stub.
- Scraping Google Maps/Yelp and sending unsolicited outreach can violate terms-of-service and local laws (spam, data protection). Prefer using official APIs (and obtain consent) rather than scraping; verify legal/regulatory compliance for target regions.
- Review and test any added scraping/outreach code in a sandbox: check for hidden network endpoints, credential handling, error handling, and rate-limiting/CAPTCHA behavior. Ensure credentials (API keys, SMTP creds, WhatsApp tokens) are stored securely and not hard-coded.
- If you want full functionality, ask the author or maintainer for: explicit dependency/install steps, a clear list of required environment variables (SMTP host/creds, WhatsApp token), consent/opt-out guidance, and an implementation that uses official APIs rather than undocumented scraping.
- If you do not control the source, avoid granting secrets until you have a complete, reviewed implementation that actually needs them.Like a lobster shell, security has layers — review code before you run it.
latestvk97fh3cg9z8je35h9wsc2gccch83byd4
License
MIT-0
Free to use, modify, and redistribute. No attribution required.