Evenrealities Tracker
v1.2.0Automate Evenrealities order monitoring (daily checks, status history, change-only alerts). Uses fast-browser-use to fill the tracker form, compare statuses, and notify Telegram only when something changes, while logging everything into `memory/evenrealities-status-history.json`.
⭐ 0· 1.2k·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the included script and docs: the package automates checks of track.evenrealities.com, compares statuses, and writes a local history. Required dependencies (playwright) are appropriate for browser automation; no unrelated credentials, binaries, or config paths are requested.
Instruction Scope
SKILL.md and the script are narrowly scoped: they load orders from memory/evenrealities-orders.json, visit the public tracking site, extract status, update memory/evenrealities-status-history.json, and rely on the platform's cron/Telegram delivery for notifications. The script does not access environment variables, other user files, or external endpoints beyond the declared tracking site.
Install Mechanism
There is no automated install spec in the package; installation is via pip (requirements.txt) and running 'playwright install', which downloads Chromium (~300–500MB). This is expected for Playwright-based tools but is a large binary download — verify you are comfortable with that before installing.
Credentials
The skill requires no environment variables or credentials. Telegram notifications are stated to be handled by the platform's cron delivery mechanism (outside this script); confirm that notification wiring on your platform is configured securely before enabling notifications.
Persistence & Privilege
The script writes persistent state to the top-level memory/ directory (memory/evenrealities-status-history.json). This is expected behavior for a tracker, but be aware that memory/ is a shared location in the agent environment — inspect its contents and permissions to ensure no sensitive data from other tools could be mixed or exposed. always:false (normal).
Assessment
This package appears to do exactly what it says: scraping the public Evenrealities tracking page and storing a local history, with notifications handled by your platform. Before installing, consider: (1) Playwright will download large browser binaries — ensure you accept that download and disk use; (2) the script writes/reads files in the project-level memory/ directory — review that directory's contents and permissions so sensitive data isn't accidentally exposed or mixed; (3) confirm the platform cron/Telegram notification integration is configured securely (the script itself does not send Telegram messages); (4) if you want added safety, run the first checks locally in a restricted environment (or container) to verify behavior. If you want, I can review the remaining truncated parts of tracker.py or search the repo for any unexpected network calls or hidden endpoints.Like a lobster shell, security has layers — review code before you run it.
latestvk978csvw1yr7c0crn59v4f5ssn80zvm9
License
MIT-0
Free to use, modify, and redistribute. No attribution required.