Restaurant Crosscheck CN

Cross-reference restaurant recommendations from Xiaohongshu (小红书) and Dianping (大众点评) to validate restaurant quality and consistency. Use when querying resta...

This skill is internally coherent but carries legal, privacy, and operational risks you should consider before installing or running it: - Legal/compliance: Both Dianping and Xiaohongshu explicitly disallow scraping in many contexts (the docs even note this). Use only for personal research and ensure you understand terms of service and local law before scraping. - Sensitive local state: The tool automates browser logins and saves session cookies locally (~/.local/share/restaurant-crosscheck/sessions). Those cookies act like authentication tokens — keep that directory private and delete/reset sessions if others can access your machine. - Proxies and cost: The instructions recommend residential proxy pools and rotating user agents for stable scraping. Residential proxy providers cost money and may require extra setup; avoid using third-party proxy credentials you don't control. - Operational footprint: Running the full version requires Playwright and will download browser binaries; on servers without GUI/appropriate environment, use the mock/simulated-data server mode instead. - Safety checklist before running: - Review the scripts (session_manager.py, fetch_*_real.py) yourself to confirm behavior. - Run in a single-user environment (not a shared/production server) or use the simulated mode for testing. - Protect the session directory (chmod 700) and delete sessions when done if you are concerned. - Consider whether you need real scraping or can rely on manual checks/official APIs for commercial use. If you want, I can point out where session files are created in the code, summarize exactly what the session_manager saves, or list the specific files the setup script will modify/create.

Type: OpenClaw Skill Name: restaurant-crosscheck-cn Version: 2.0.0 The skill is classified as suspicious primarily due to the `pip3 install --break-system-packages` command in `setup.sh`. While the core functionality of web scraping (using Playwright to access Dianping and Xiaohongshu, saving session data and results locally) is aligned with the stated purpose and transparently documented, the `--break-system-packages` flag can lead to system instability and is a significant vulnerability. There is no clear evidence of intentional malicious behavior such as data exfiltration to unauthorized endpoints, backdoors, or harmful prompt injection attempts in the documentation.