Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Restaurant Lead Generator

v0.1.0

Automated restaurant lead generation and outreach for SMB sales. Use when you need to find restaurant leads, enrich business data (website, phone, address),...

0· 105·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for rowerguy508/restaurant-lead-gen.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Restaurant Lead Generator" (rowerguy508/restaurant-lead-gen) from ClawHub.
Skill page: https://clawhub.ai/rowerguy508/restaurant-lead-gen
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install restaurant-lead-gen

ClawHub CLI

Package manager switcher

npx clawhub@latest install restaurant-lead-gen
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
high confidence
!
Purpose & Capability
The description promises discovery, enrichment, and automated outreach (Google Maps/Yelp scraping, SMTP, WhatsApp Business API). However, the included script (generate_leads.py) only synthesizes random sample leads and does not implement scraping, data enrichment, or any networked outreach. The skill also mentions SeleniumBase and browser automation but provides no declared dependencies or install steps. This mismatch suggests the package is incomplete or misleading about its capabilities.
!
Instruction Scope
SKILL.md explicitly directs scraping Google Maps and Yelp via browser automation and to send outreach via SMTP or the WhatsApp Business API. Those are operations that require careful handling of credentials, rate-limiting, and legal/terms-of-service concerns. The SKILL.md also includes a Selenium code snippet, but the actual shipped script does not perform these actions. The instructions are vague and grant broad discretion (e.g., 'Use SeleniumBase or browser automation') without constraints or safety guidance.
Install Mechanism
There is no install specification (instruction-only skill) and no declared dependencies, yet the documentation references SeleniumBase and browser automation. Absence of install instructions or dependency listing is inconsistent but not itself high-risk; it means a user would need to install these tools manually. No external downloads, taps, or archives are present in the manifest.
!
Credentials
The skill requests no environment variables or credentials, yet SKILL.md describes using SMTP and the WhatsApp Business API (which require credentials) and scraping flows that might need API keys or proxies. That mismatch is problematic: either required sensitive credentials are omitted from the manifest (hidden/undeclared), or the skill cannot actually perform the stated outreach. Additionally the generated phone numbers and country codes in the script do not consistently match all target regions (e.g., Peru listed but script uses +1-style numbers), indicating sloppy/incoherent data handling.
Persistence & Privilege
The skill is not flagged as always: true and uses default autonomy settings. It does not request elevated or persistent platform privileges and does not modify other skill configurations according to the provided manifest.
What to consider before installing
Key points before installing or using this skill: - Expect to provision extra tooling and credentials: the README references Selenium, SMTP and WhatsApp Business API but the manifest declares no installs or env vars. You will need to install browser automation libraries and provide SMTP/WhatsApp credentials yourself. - The included script only generates synthetic sample leads (randomized names/addresses/phones); it does not implement scraping, enrichment, or outreach. If you expected automated scraping or messaging, this package is incomplete or a stub. - Scraping Google Maps/Yelp and sending unsolicited outreach can violate terms-of-service and local laws (spam, data protection). Prefer using official APIs (and obtain consent) rather than scraping; verify legal/regulatory compliance for target regions. - Review and test any added scraping/outreach code in a sandbox: check for hidden network endpoints, credential handling, error handling, and rate-limiting/CAPTCHA behavior. Ensure credentials (API keys, SMTP creds, WhatsApp tokens) are stored securely and not hard-coded. - If you want full functionality, ask the author or maintainer for: explicit dependency/install steps, a clear list of required environment variables (SMTP host/creds, WhatsApp token), consent/opt-out guidance, and an implementation that uses official APIs rather than undocumented scraping. - If you do not control the source, avoid granting secrets until you have a complete, reviewed implementation that actually needs them.

Like a lobster shell, security has layers — review code before you run it.

latestvk97fh3cg9z8je35h9wsc2gccch83byd4
105downloads
0stars
1versions
Updated 1mo ago
v0.1.0
MIT-0

Restaurant Lead Gen

Automated lead generation and outreach for restaurant sales.

When to Use

  • "Find restaurants in [city/region]"
  • "Generate leads for restaurant clients"
  • "Send outreach emails to restaurants"
  • "Enrich restaurant data with website/phone"
  • "Build a restaurant sales pipeline"

Lead Discovery

Search Methods

  1. Google Maps scraping - Use SeleniumBase or browser automation
  2. Yelp directory - Scrape local restaurant listings
  3. Direct Google search - restaurants in [location]

Data to Collect

FieldPriority
NameRequired
AddressRequired
PhoneHigh
WebsiteHigh
Cuisine typeMedium
HoursLow

Outreach Templates

Email (PAS Formula)

Subject: [Problem headline]

Hi [Name],

[Problem]: Many [restaurant type] owners struggle with [issue].

[Agitate]: Without solving this, you're losing [X] per [week/month].

[Solution]: We help restaurants like yours [benefit].

Best,
[Your name]

WhatsApp

Hi [Name]! 👋

Saw your spot - love what you're doing at [Restaurant]!

Quick question: are you currently dealing with [pain point]?

Happy to chat if it makes sense. No pressure!

Workflow

Quick Lead Gen

  1. Discover leads via search
  2. Enrich with website/contact data
  3. Add to outreach list
  4. Send personalized outreach
  5. Track responses

Automation Script

# Lead enrichment example
from selenium import webdriver

def enrich_restaurant(name, address):
    driver = webdriver.Chrome()
    search = f"{name} {address} restaurant website"
    # Extract from Google results
    return {"website": ..., "phone": ...}

Regions to Target

  • Dominican Republic
  • Puerto Rico
  • Peru
  • Other Latin American markets

Tools

  • SeleniumBase - Web scraping
  • Browser automation - Data enrichment
  • Email - Outreach (SMTP or API)
  • WhatsApp Business API - Direct messaging

Output

Save leads to CSV:

name,address,phone,website,cuisine,status,notes
Restaurant Name,123 Main St,+1-555-1234,https://...,Italian,new,

Comments

Loading comments...