Rental Helper

租房助手 - 帮助用户记录房源信息、计算租房预算、生成对比表格、提供租房避坑指南、智能推荐房源、批量导入、网页解析、图片识别、网站抓取。使用场景：(1) 记录和筛选房源信息 - 说"记录一个新房源"或"查看我的房源列表"；(2) 计算租房预算 - 说"帮我算一下租房预算"或"这个房子每月要花多少钱"；(3) 生成...

This skill is internally coherent for managing and scraping rental listings, but review the following before installing/using: 1) Local storage: scraped data, contacts and phone numbers are saved to ~/.openclaw/workspace/rental-data — treat that as potentially sensitive personal data and back it up or secure it appropriately. 2) SSL verification: crawl_listings.py intentionally disables SSL certificate verification (ssl._create_default_https_context = ssl._create_unverified_context) which weakens network security and can expose you to MITM attacks when fetching pages — consider removing that line or running the script only on trusted networks. 3) Webdriver/runtime downloads: selenium + webdriver-manager will download browser drivers at runtime; verify these components and run in a trusted environment. 4) Interactive login: crawl_interactive.py asks you to login in a real browser (QR/code). Do not paste credentials into the skill — perform the login in the browser as instructed. 5) Dependencies: OCR and scraping require external packages (pytesseract, easyocr, tesseract, selenium); install them from trusted package sources and verify versions. 6) Legal/ToS: scraping sites may violate target sites' terms of service — use responsibly and respect robots.txt. If you want higher assurance, ask for the omitted files to be reviewed or run the code in an isolated environment (container/VM) before giving it regular access to your data.

Type: OpenClaw Skill Name: rental-helper Version: 1.3.0 The skill bundle provides a comprehensive rental management system with high-risk capabilities, including web scraping and automated browser control. Specifically, 'scripts/crawl_listings.py' and 'scripts/crawl_selenium.py' target major Chinese rental platforms (ke.com, lianjia.com, 58.com, anjuke.com), while 'scripts/crawl_interactive.py' uses Selenium to open a browser and prompts the user to perform manual logins. While these features align with the stated purpose of a rental assistant, the inclusion of automated scraping, OCR ('scripts/parse_image.py'), and the bypassing of SSL verification ('scripts/crawl_listings.py') are considered high-risk behaviors in an agentic environment. No clear evidence of malicious intent or data exfiltration was found.