📦

yelp

Name: yelp
Author: fetcher-sh

Revisão do conteúdo r1 Risco Médio ⚙️ Comandos externos🌐 Acesso à rede📁 Acesso ao sistema de arquivos🔑 Variáveis de ambiente

Search Yelp Businesses and Reviews

Local business research requires searching listings and gathering details and reviews. This skill documents paid fetcher.sh requests for these tasks through HTTP and MCP.

Suporta: Claude Codex Code(CC)

📊 69 Adequado

Instalar com meu Agente

Copie esta solicitação para o seu Agente. Ela inclui a página canônica do Skill e o manifesto.

Solicitação do agente

Review the Skillstore skill "yelp" from https://skillstore.io/skills/fetcher-sh-yelp.md and its manifest at https://skillstore.io/api/skills/fetcher-sh-yelp/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Seu Agente ainda deve apresentar o plano e solicitar qualquer confirmação exigida pela política de segurança.

Recursos legíveis por agentes

Use estes links quando um agente de IA, crawler ou script precisar de contexto limpo em vez de ler a página completa.

Detalhe em Markdown GET /skills/fetcher-sh-yelp.md manifest assinado GET /api/skills/fetcher-sh-yelp/manifest lockfile assinado GET /api/skills/fetcher-sh-yelp/lockfile

Testar

Usando "yelp". Explain the request for ramen businesses in San Francisco sorted by rating.

Resultado esperado:

Search: ramen in San Francisco.
Sorting: rating.
Endpoint: business search.
Documented cost: $0.003 for one call.
Payment approval is required before execution.

Usando "yelp". Explain how to retrieve a business's second review page.

Resultado esperado:

Use the business ID with the reviews endpoint.
Set the page parameter to 2.
Authenticate with prepaid credits or an approved x402 payment setup.
Stop after payment errors; upstream failures may still incur charges.

Usando "yelp". Which documented MCP tools are free or paid?

Resultado esperado:

Free: search_endpoints, describe_endpoint, and check_balance.
Paid: fetch_data, topup_credits, and yelp_search.
Confirm spending and credit topups before invoking paid tools.

Auditoria de segurança

Risco Médio

v1 • 30/09/2026 Abrir o relatório versionado

All 57 static findings are false positives involving Markdown, reference links, documented API calls, placeholders, or expected service authentication. No evidence found of malware, credential theft, or prompt injection in the reviewed file. A separate payment-safety finding concerns automatic signing without documented spending limits and nonrefundable upstream failures.

Arquivos analisados

138

Linhas analisadas

Itens de revisão

Falsos positivos ignorados

Preocupações de segurança confirmadas (1)

Médio

SKILL.md:43-45 SKILL.md:116-119 SKILL.md:128-129

Automatic payments lack documented spending safeguards

The guide says payment signing and retries are automatic and exposes paid MCP tools without spending limits or confirmation requirements. Nonrefundable upstream failures can amplify losses from repeated agent calls.

Automatic signing, paid tools, and nonrefundable settlement are explicit; this file supplies no consent or budget controls. External implementations may impose safeguards, but were not reviewed.

Fatores de risco

⚙️ Comandos externos (30)

🌐 Acesso à rede (13)

SKILL.md:29 SKILL.md:37 SKILL.md:41 SKILL.md:72 SKILL.md:82 SKILL.md:89 SKILL.md:92 SKILL.md:100 SKILL.md:109 SKILL.md:133 SKILL.md:134 SKILL.md:135 SKILL.md:137

📁 Acesso ao sistema de arquivos (3)

SKILL.md:34 SKILL.md:119 SKILL.md:136

🔑 Variáveis de ambiente (7)

SKILL.md:39 SKILL.md:40 SKILL.md:68 SKILL.md:78 SKILL.md:88 SKILL.md:91 SKILL.md:98

Auditado por: codex

Compartilhar e citar este relatório

Compartilhe o relatório de avaliação versionado, o badge neutro, o cartão incorporável e as citações. A Skillstore apresenta evidências sem decidir se este Skill é seguro.

Abrir o relatório versionado

Copiar link do relatório

https://skillstore.io/skills/fetcher-sh-yelp/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Badge Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/fetcher-sh-yelp/security.svg)](https://skillstore.io/skills/fetcher-sh-yelp?utm_source=security_passport_badge)

Badge HTML

<a href="https://skillstore.io/skills/fetcher-sh-yelp?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/fetcher-sh-yelp/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Cartão incorporável

<iframe src="https://skillstore.io/embed/skills/fetcher-sh-yelp.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citações acadêmicas (APA · BibTeX · CFF)

Citação APA

fetcher-sh. (2026). yelp security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/fetcher-sh-yelp/audits/1

Citação BibTeX

@techreport{fetcher-sh-fetcher-sh-yelp-2026,
  author = {fetcher-sh},
  title = {yelp security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/fetcher-sh-yelp/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "yelp security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "fetcher-sh"
date-released: "2026-09-30"
url: "https://skillstore.io/skills/fetcher-sh-yelp/audits/1"
identifiers:
  - type: other
    value: "skillstore:fetcher-sh-yelp:audit:1"
    description: "Skillstore immutable audit report identifier"

Pontuação do Skillstore

Por que esta pontuação Confiança das evidências: Médio

Arquitetura

Manutenibilidade

Conteúdo

Comunidade

Conformidade com a especificação

O que você pode criar

Compare dining options

Search restaurants in a destination and compare returned results by rating or review count.

Research local competitors

Find nearby businesses and retrieve their details and review pages for manual comparison.

Connect a research assistant

Configure the remote MCP service and use its documented tools within an approved request budget.

Teste estes prompts

Search a location

Find ramen businesses in San Francisco using fetcher.sh. Confirm the payment method and one-call cost before making the request.

Compare search sorting

Search tacos in Austin by rating, then by review count. Ask approval for two paid calls and compare only returned results.

Retrieve details and reviews

Retrieve details and review page two for Yelp handle gary-danko-san-francisco. Confirm a two-call budget and stop on payment errors.

Plan an MCP workflow

Plan a Yelp MCP workflow for competitor research. Separate free discovery from paid retrieval, protect credentials, and require approval for spending and topups.

Boas práticas

Verify current pricing and authorize a request budget before paid calls or credit topups.
Keep service keys outside prompts and shared configuration; send them only to the intended provider.
Use explicit locations, supported sort values, and limited pagination; stop after paid failures.

Evitar

Allowing automatic paid retries or credit topups without spending approval.
Placing live Bearer keys in shared files, chat messages, or logs.
Treating returned reviews as complete, current, or statistically representative without verification.

Perguntas frequentes

Is this the official Yelp Fusion API?

No. It documents a third-party fetcher.sh service for Yelp business data, not a direct Yelp Fusion integration.

How are requests paid?

The guide supports prepaid credits with a Bearer key or per-call USDC payments through x402.

What does a request cost?

The guide lists $0.003 per call for its four data endpoints. Verify current prices before approving requests.

Can I sort and paginate results?

Search supports recommendation, rating, and review-count sorting plus pagination. Review retrieval also supports a page parameter.

Can Claude, Codex, and Claude Code use this skill?

The skill provides HTTP instructions and remote MCP configuration. Execution depends on the client's tools, connectivity, credentials, and payment setup.

Are failed requests refunded?

The guide states that upstream failures are nonrefundable because settlement precedes delivery. Approve budgets and avoid uncontrolled retries.

Detalhes do desenvolvedor

Autor

fetcher-sh

Licença

MIT

Revisão da Skillstore

Aviso de versão

O autor não declarou uma versão.

Repositório

https://github.com/fetcher-sh/fetcher-skills/tree/d7e88be6e1210bae14803dcb435e19d36cf8a17c/skills/yelp

Referência

d47538c68dbdc71b7d5879e2b0a19d3608869cea

Atualidade da manutenção

30/09/2026

Uso

0 downloads · 0 visualizações

Estrutura de arquivos

📄 SKILL.md