Pangolinfo Scrape (Legacy)

Search Google and scrape Amazon using Pangolin APIs. Supports AI Mode search (Google AI Overview with multi-turn dialogue), standard SERP with AI Overview ex...

This package appears to implement the advertised Pangolin scraping functionality and the included Python client is readable and zero-dependency. However: (1) the registry metadata incorrectly lists no required environment variables — the script needs PANGOLIN_TOKEN or PANGOLIN_EMAIL + PANGOLIN_PASSWORD. Treat that mismatch as a red flag and ask the publisher/registry to correct it. (2) The script will send your email/password to https://scrapeapi.pangolinfo.com/auth to obtain a bearer token and will save the token at ~/.pangolin_token (file permissions set to 600). Prefer providing an existing PANGOLIN_TOKEN rather than your account password. (3) The source/homepage is unknown; verify the publisher and the legitimacy of scrapeapi.pangolinfo.com before supplying credentials. (4) If you decide to install/use it, run it in a restricted environment (or inspect/run the script manually) and consider creating a dedicated Pangolin account or short‑lived token so you don't expose your primary credentials.

Type: OpenClaw Skill Name: pangolinfo-scrape-legacy Version: 1.0.1 The skill bundle provides a legitimate Python client and documentation for interacting with Pangolin's Google SERP and Amazon scraping APIs. The core script, `scripts/pangolinfo.py`, uses only Python standard libraries to perform authenticated requests to the official API endpoint (scrapeapi.pangolinfo.com). It handles sensitive credentials (PANGOLIN_EMAIL/PASSWORD) and tokens appropriately, including secure local caching in `~/.pangolin_token` with restricted file permissions (0o600). No evidence of data exfiltration, unauthorized execution, or malicious prompt injection was found.