Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Restaurant Crosscheck CN

v2.0.0

Cross-reference restaurant recommendations from Xiaohongshu (小红书) and Dianping (大众点评) to validate restaurant quality and consistency. Use when querying resta...

0· 677·3 current·4 all-time
byRenfeiZhong@zhongrenfei1-hub
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
The name/description (cross-check Dianping + Xiaohongshu) matches the code and runtime instructions: Playwright-based scraping, fuzzy matching, sentiment heuristics and scoring. Requiring browser automation, cookies, and proxy rotation is coherent because neither platform exposes a public API for the needed data.
Instruction Scope
SKILL.md (and scripts) instruct the agent/user to perform web scraping of both sites, manage login sessions via a session manager, persist cookies locally, rotate user agents and proxies, and save results locally. All of those steps are within the stated purpose, but they broaden the agent's actions to include automated login flows and persistent storage of authentication state — noteworthy operational and privacy surface area.
Install Mechanism
There is no platform install spec in the manifest, but the repository includes setup.sh that installs Python deps and triggers Playwright browser downloads. Dependencies are standard for scraping/automation (playwright, thefuzz). No downloads from suspicious personal servers or URL shorteners were observed; Playwright will fetch browser binaries via its normal mechanism.
Credentials
The skill declares no required environment variables or credentials, which aligns with the README (user logs in manually in the browser). However the skill persistently stores session cookies under a session directory in the user's home and recommends (optionally) configuring proxies. Persisted cookies and proxy credentials are sensitive — the skill does not request them as env vars but it creates/uses local session files that should be protected.
Persistence & Privilege
The skill does not request elevated platform privileges and 'always' is false. It persists its own session files under ~/.local/share/restaurant-crosscheck/sessions and writes output JSON to ~/Downloads. It does not modify other skills or system-wide agent settings. Persistent presence is limited to its own files.
Assessment
This skill is internally coherent but carries legal, privacy, and operational risks you should consider before installing or running it: - Legal/compliance: Both Dianping and Xiaohongshu explicitly disallow scraping in many contexts (the docs even note this). Use only for personal research and ensure you understand terms of service and local law before scraping. - Sensitive local state: The tool automates browser logins and saves session cookies locally (~/.local/share/restaurant-crosscheck/sessions). Those cookies act like authentication tokens — keep that directory private and delete/reset sessions if others can access your machine. - Proxies and cost: The instructions recommend residential proxy pools and rotating user agents for stable scraping. Residential proxy providers cost money and may require extra setup; avoid using third-party proxy credentials you don't control. - Operational footprint: Running the full version requires Playwright and will download browser binaries; on servers without GUI/appropriate environment, use the mock/simulated-data server mode instead. - Safety checklist before running: - Review the scripts (session_manager.py, fetch_*_real.py) yourself to confirm behavior. - Run in a single-user environment (not a shared/production server) or use the simulated mode for testing. - Protect the session directory (chmod 700) and delete sessions when done if you are concerned. - Consider whether you need real scraping or can rely on manual checks/official APIs for commercial use. If you want, I can point out where session files are created in the code, summarize exactly what the session_manager saves, or list the specific files the setup script will modify/create.

Like a lobster shell, security has layers — review code before you run it.

latestvk979b1t1s1p6wwysh2zfv3vx9d818cce

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments