📦

yelp

Name: yelp
Author: fetcher-sh

Revisión del contenido r1 Riesgo medio ⚙️ Comandos externos🌐 Acceso a red📁 Acceso al sistema de archivos🔑 Variables de entorno

Search Yelp Businesses and Reviews

Local business research requires searching listings and gathering details and reviews. This skill documents paid fetcher.sh requests for these tasks through HTTP and MCP.

Compatible con: Claude Codex Code(CC)

📊 69 Adecuado

Maintain this Skill? Claim it 📊 69 Adecuado

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente

Review the Skillstore skill "yelp" from https://skillstore.io/skills/fetcher-sh-yelp.md and its manifest at https://skillstore.io/api/skills/fetcher-sh-yelp/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Detalle Markdown GET /skills/fetcher-sh-yelp.md Manifest firmado GET /api/skills/fetcher-sh-yelp/manifest Lockfile firmado GET /api/skills/fetcher-sh-yelp/lockfile

Pruébalo

Usando "yelp". Explain the request for ramen businesses in San Francisco sorted by rating.

Resultado esperado:

Search: ramen in San Francisco.
Sorting: rating.
Endpoint: business search.
Documented cost: $0.003 for one call.
Payment approval is required before execution.

Usando "yelp". Explain how to retrieve a business's second review page.

Resultado esperado:

Use the business ID with the reviews endpoint.
Set the page parameter to 2.
Authenticate with prepaid credits or an approved x402 payment setup.
Stop after payment errors; upstream failures may still incur charges.

Usando "yelp". Which documented MCP tools are free or paid?

Resultado esperado:

Free: search_endpoints, describe_endpoint, and check_balance.
Paid: fetch_data, topup_credits, and yelp_search.
Confirm spending and credit topups before invoking paid tools.

Auditoría de seguridad

Riesgo medio

v1 • 30/9/2026 Abrir el informe versionado

All 57 static findings are false positives involving Markdown, reference links, documented API calls, placeholders, or expected service authentication. No evidence found of malware, credential theft, or prompt injection in the reviewed file. A separate payment-safety finding concerns automatic signing without documented spending limits and nonrefundable upstream failures.

Archivos escaneados

138

Líneas analizadas

Elementos de revisión

Falsos positivos ignorados

Preocupaciones de seguridad confirmadas (1)

Medio

SKILL.md:43-45 SKILL.md:116-119 SKILL.md:128-129

Automatic payments lack documented spending safeguards

The guide says payment signing and retries are automatic and exposes paid MCP tools without spending limits or confirmation requirements. Nonrefundable upstream failures can amplify losses from repeated agent calls.

Automatic signing, paid tools, and nonrefundable settlement are explicit; this file supplies no consent or budget controls. External implementations may impose safeguards, but were not reviewed.

Factores de riesgo

⚙️ Comandos externos (30)

🌐 Acceso a red (13)

SKILL.md:29 SKILL.md:37 SKILL.md:41 SKILL.md:72 SKILL.md:82 SKILL.md:89 SKILL.md:92 SKILL.md:100 SKILL.md:109 SKILL.md:133 SKILL.md:134 SKILL.md:135 SKILL.md:137

📁 Acceso al sistema de archivos (3)

SKILL.md:34 SKILL.md:119 SKILL.md:136

🔑 Variables de entorno (7)

SKILL.md:39 SKILL.md:40 SKILL.md:68 SKILL.md:78 SKILL.md:88 SKILL.md:91 SKILL.md:98

Auditado por: codex

Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado

Copiar enlace del informe

https://skillstore.io/skills/fetcher-sh-yelp/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/fetcher-sh-yelp/security.svg)](https://skillstore.io/skills/fetcher-sh-yelp?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/fetcher-sh-yelp?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/fetcher-sh-yelp/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/fetcher-sh-yelp.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citas académicas (APA · BibTeX · CFF)

Cita APA

fetcher-sh. (2026). yelp security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/fetcher-sh-yelp/audits/1

Cita BibTeX

@techreport{fetcher-sh-fetcher-sh-yelp-2026,
  author = {fetcher-sh},
  title = {yelp security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/fetcher-sh-yelp/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "yelp security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "fetcher-sh"
date-released: "2026-09-30"
url: "https://skillstore.io/skills/fetcher-sh-yelp/audits/1"
identifiers:
  - type: other
    value: "skillstore:fetcher-sh-yelp:audit:1"
    description: "Skillstore immutable audit report identifier"

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio

Arquitectura

Mantenibilidad

Contenido

Comunidad

Cumplimiento de la especificación

Lo que puedes crear

Compare dining options

Search restaurants in a destination and compare returned results by rating or review count.

Research local competitors

Find nearby businesses and retrieve their details and review pages for manual comparison.

Connect a research assistant

Configure the remote MCP service and use its documented tools within an approved request budget.

Prueba estos prompts

Search a location

Find ramen businesses in San Francisco using fetcher.sh. Confirm the payment method and one-call cost before making the request.

Compare search sorting

Search tacos in Austin by rating, then by review count. Ask approval for two paid calls and compare only returned results.

Retrieve details and reviews

Retrieve details and review page two for Yelp handle gary-danko-san-francisco. Confirm a two-call budget and stop on payment errors.

Plan an MCP workflow

Plan a Yelp MCP workflow for competitor research. Separate free discovery from paid retrieval, protect credentials, and require approval for spending and topups.

Mejores prácticas

Verify current pricing and authorize a request budget before paid calls or credit topups.
Keep service keys outside prompts and shared configuration; send them only to the intended provider.
Use explicit locations, supported sort values, and limited pagination; stop after paid failures.

Evitar

Allowing automatic paid retries or credit topups without spending approval.
Placing live Bearer keys in shared files, chat messages, or logs.
Treating returned reviews as complete, current, or statistically representative without verification.

Preguntas frecuentes

Is this the official Yelp Fusion API?

No. It documents a third-party fetcher.sh service for Yelp business data, not a direct Yelp Fusion integration.

How are requests paid?

The guide supports prepaid credits with a Bearer key or per-call USDC payments through x402.

What does a request cost?

The guide lists $0.003 per call for its four data endpoints. Verify current prices before approving requests.

Can I sort and paginate results?

Search supports recommendation, rating, and review-count sorting plus pagination. Review retrieval also supports a page parameter.

Can Claude, Codex, and Claude Code use this skill?

The skill provides HTTP instructions and remote MCP configuration. Execution depends on the client's tools, connectivity, credentials, and payment setup.

Are failed requests refunded?

The guide states that upstream failures are nonrefundable because settlement precedes delivery. Approve budgets and avoid uncontrolled retries.

Detalles del desarrollador

Autor

fetcher-sh

Licencia

MIT

Revisión de Skillstore

Aviso de versión

El autor no declaró una versión.

Repositorio

https://github.com/fetcher-sh/fetcher-skills/tree/d7e88be6e1210bae14803dcb435e19d36cf8a17c/skills/yelp

Ref.

d47538c68dbdc71b7d5879e2b0a19d3608869cea

Actualidad del mantenimiento

30/9/2026

Uso

0 descargas · 0 vistas

Estructura de archivos

📄 SKILL.md