📦

yelp

Name: yelp
Author: fetcher-sh

Inhaltsrevision r1 Mittleres Risiko ⚙️ Externe Befehle🌐 Netzwerkzugriff📁 Dateisystemzugriff🔑 Umgebungsvariablen

Search Yelp Businesses and Reviews

Local business research requires searching listings and gathering details and reviews. This skill documents paid fetcher.sh requests for these tasks through HTTP and MCP.

Unterstützt: Claude Codex Code(CC)

📊 69 Angemessen

Maintain this Skill? Claim it 📊 69 Angemessen

Mit meinem Agent installieren

Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.

Agent-Anfrage

Review the Skillstore skill "yelp" from https://skillstore.io/skills/fetcher-sh-yelp.md and its manifest at https://skillstore.io/api/skills/fetcher-sh-yelp/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.

Agent-lesbare Ressourcen

Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.

Markdown-Detailseite GET /skills/fetcher-sh-yelp.md Signiertes manifest GET /api/skills/fetcher-sh-yelp/manifest Signiertes lockfile GET /api/skills/fetcher-sh-yelp/lockfile

Testen

„yelp“ wird verwendet. Explain the request for ramen businesses in San Francisco sorted by rating.

Erwartetes Ergebnis:

Search: ramen in San Francisco.
Sorting: rating.
Endpoint: business search.
Documented cost: $0.003 for one call.
Payment approval is required before execution.

„yelp“ wird verwendet. Explain how to retrieve a business's second review page.

Erwartetes Ergebnis:

Use the business ID with the reviews endpoint.
Set the page parameter to 2.
Authenticate with prepaid credits or an approved x402 payment setup.
Stop after payment errors; upstream failures may still incur charges.

„yelp“ wird verwendet. Which documented MCP tools are free or paid?

Erwartetes Ergebnis:

Free: search_endpoints, describe_endpoint, and check_balance.
Paid: fetch_data, topup_credits, and yelp_search.
Confirm spending and credit topups before invoking paid tools.

Sicherheitsaudit

Mittleres Risiko

v1 • 30.9.2026 Versionsbericht öffnen

All 57 static findings are false positives involving Markdown, reference links, documented API calls, placeholders, or expected service authentication. No evidence found of malware, credential theft, or prompt injection in the reviewed file. A separate payment-safety finding concerns automatic signing without documented spending limits and nonrefundable upstream failures.

Gescannte Dateien

138

Analysierte Zeilen

Prüfelemente

Falschmeldungen ignoriert

Bestätigte Sicherheitsbedenken (1)

Mittel

SKILL.md:43-45 SKILL.md:116-119 SKILL.md:128-129

Automatic payments lack documented spending safeguards

The guide says payment signing and retries are automatic and exposes paid MCP tools without spending limits or confirmation requirements. Nonrefundable upstream failures can amplify losses from repeated agent calls.

Automatic signing, paid tools, and nonrefundable settlement are explicit; this file supplies no consent or budget controls. External implementations may impose safeguards, but were not reviewed.

Risikofaktoren

⚙️ Externe Befehle (30)

🌐 Netzwerkzugriff (13)

SKILL.md:29 SKILL.md:37 SKILL.md:41 SKILL.md:72 SKILL.md:82 SKILL.md:89 SKILL.md:92 SKILL.md:100 SKILL.md:109 SKILL.md:133 SKILL.md:134 SKILL.md:135 SKILL.md:137

📁 Dateisystemzugriff (3)

SKILL.md:34 SKILL.md:119 SKILL.md:136

🔑 Umgebungsvariablen (7)

SKILL.md:39 SKILL.md:40 SKILL.md:68 SKILL.md:78 SKILL.md:88 SKILL.md:91 SKILL.md:98

Geprüft von: codex

Diesen Bericht teilen & zitieren

Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.

Versionsbericht öffnen

Berichtslink kopieren

https://skillstore.io/skills/fetcher-sh-yelp/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown-Badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/fetcher-sh-yelp/security.svg)](https://skillstore.io/skills/fetcher-sh-yelp?utm_source=security_passport_badge)

HTML-Badge

<a href="https://skillstore.io/skills/fetcher-sh-yelp?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/fetcher-sh-yelp/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Einbettungskarte

<iframe src="https://skillstore.io/embed/skills/fetcher-sh-yelp.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Wissenschaftliche Zitate (APA · BibTeX · CFF)

APA-Zitat

fetcher-sh. (2026). yelp security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/fetcher-sh-yelp/audits/1

BibTeX-Zitat

@techreport{fetcher-sh-fetcher-sh-yelp-2026,
  author = {fetcher-sh},
  title = {yelp security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/fetcher-sh-yelp/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "yelp security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "fetcher-sh"
date-released: "2026-09-30"
url: "https://skillstore.io/skills/fetcher-sh-yelp/audits/1"
identifiers:
  - type: other
    value: "skillstore:fetcher-sh-yelp:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore-Score

Warum dieser Score Evidenzvertrauen: Mittel

Architektur

Wartbarkeit

Inhalt

Gemeinschaft

Spezifikationskonformität

Was Sie erstellen können

Compare dining options

Search restaurants in a destination and compare returned results by rating or review count.

Research local competitors

Find nearby businesses and retrieve their details and review pages for manual comparison.

Connect a research assistant

Configure the remote MCP service and use its documented tools within an approved request budget.

Diese Prompts ausprobieren

Search a location

Find ramen businesses in San Francisco using fetcher.sh. Confirm the payment method and one-call cost before making the request.

Compare search sorting

Search tacos in Austin by rating, then by review count. Ask approval for two paid calls and compare only returned results.

Retrieve details and reviews

Retrieve details and review page two for Yelp handle gary-danko-san-francisco. Confirm a two-call budget and stop on payment errors.

Plan an MCP workflow

Plan a Yelp MCP workflow for competitor research. Separate free discovery from paid retrieval, protect credentials, and require approval for spending and topups.

Bewährte Praktiken

Verify current pricing and authorize a request budget before paid calls or credit topups.
Keep service keys outside prompts and shared configuration; send them only to the intended provider.
Use explicit locations, supported sort values, and limited pagination; stop after paid failures.

Vermeiden

Allowing automatic paid retries or credit topups without spending approval.
Placing live Bearer keys in shared files, chat messages, or logs.
Treating returned reviews as complete, current, or statistically representative without verification.

Häufig gestellte Fragen

Is this the official Yelp Fusion API?

No. It documents a third-party fetcher.sh service for Yelp business data, not a direct Yelp Fusion integration.

How are requests paid?

The guide supports prepaid credits with a Bearer key or per-call USDC payments through x402.

What does a request cost?

The guide lists $0.003 per call for its four data endpoints. Verify current prices before approving requests.

Can I sort and paginate results?

Search supports recommendation, rating, and review-count sorting plus pagination. Review retrieval also supports a page parameter.

Can Claude, Codex, and Claude Code use this skill?

The skill provides HTTP instructions and remote MCP configuration. Execution depends on the client's tools, connectivity, credentials, and payment setup.

Are failed requests refunded?

The guide states that upstream failures are nonrefundable because settlement precedes delivery. Approve budgets and avoid uncontrolled retries.

Entwicklerdetails

Autor

fetcher-sh

Lizenz

MIT

Skillstore-Revision

Versionshinweis

Der Autor hat keine Version angegeben.

Repository

https://github.com/fetcher-sh/fetcher-skills/tree/d7e88be6e1210bae14803dcb435e19d36cf8a17c/skills/yelp

Ref.

d47538c68dbdc71b7d5879e2b0a19d3608869cea

Aktualität der Wartung

30.9.2026

Nutzung

0 Downloads · 0 Aufrufe

Dateistruktur

📄 SKILL.md