Pinterest Scraper

Scrapes Pinterest boards, profiles, or search results with infinite scroll, image quality options, deduplication, resume support, and Telegram album sending.

This skill appears to do what it says: scraping Pinterest and optionally sending images to Telegram. Before installing/running, consider: (1) TLS: the code disables SSL verification for downloads (verify=False) — this weakens security; avoid running on untrusted networks or modify the code to enable verification. (2) Secrets: supplying the Telegram bot token on the command line can expose it in shell history or process listings — prefer passing tokens via a protected file or environment variable (the script currently expects CLI flags). (3) Output data: the scraper writes images, a .scrape_state.json and scrape.log to the output folder; these may contain URLs or metadata you may not want to keep or share. (4) Legal/ethical: scraping Pinterest content may violate terms of service or copyright — ensure you have the right to download and distribute images. (5) Operational: Playwright will download a browser (chromium) and run headless; ensure your environment allows running headless browsers. If you want extra assurance, review/modify the script (enable SSL verification, change how tokens are provided, and inspect logging behavior) before use.

Type: OpenClaw Skill Name: pinterest-scraper Version: 1.1.0 The skill is classified as suspicious primarily due to the explicit use of `verify=False` in `requests.get` within `scripts/scrape_pinterest.py`. This disables SSL certificate verification, making the application vulnerable to Man-in-the-Middle (MITM) attacks, even though it's documented as a workaround for 'Mac SSL issues' in `SKILL.md`. While the skill's core functionality (Pinterest scraping, Telegram integration) aligns with its stated purpose and there's no evidence of intentional malicious behavior like data exfiltration to unauthorized endpoints or persistence mechanisms, this critical vulnerability warrants a 'suspicious' classification.