category-link-collector Security Report — Low Risk | ClawSafe

10 /100

category-link-collector

采集电商网站分类链接信息，提取分类层级数据并保存为CSV文件

This is a legitimate e-commerce category link collector that parses URLs and exports structured CSV data. No malicious behavior detected.

Skill Namecategory-link-collector

Duration30.6s

Enginepi

✓

Safe to install

This skill is safe to use. No security concerns identified.

Findings 1 items

Severity	Finding	Location
Low	Hardcoded output path in code Doc Mismatch The output directory /Users/zhangqirong/工作/caiji is hardcoded in multiple files but documented in SKILL.md. Not a security issue but poor practice. `output_dir="/Users/zhangqirong/工作/caiji"` → Use environment variable or command-line argument for output directory	`scripts/collect_categories.py:89`

Resource	Declared	Inferred	Status	Evidence
Filesystem	`WRITE`	`WRITE`	✓ Aligned	scripts/collect_categories.py:137 - df.to_csv(csv_path)
Network	`NONE`	`NONE`	—	No network requests made - only local URL parsing
Shell	`NONE`	`NONE`	—	No subprocess or shell commands used
Environment	`NONE`	`NONE`	—	No environment variable access

34 findings

🔗

Medium External URL 外部 URL

https://lulumonclick-eu.shop/collections/women-women-clothes-tank-tops

README.md:20

🔗

Medium External URL 外部 URL

https://lulumonclick-eu.shop/collections/women-women-clothes-bras-underwear

README.md:21

🔗

Medium External URL 外部 URL

https://zaraoutlet.top/collections/woman_1e641d06

collect_10_links.py:16

🔗

Medium External URL 外部 URL

https://zaraoutlet.top/collections/man

collect_10_links.py:17

🔗

Medium External URL 外部 URL

https://zaraoutlet.top/collections/kids

collect_10_links.py:18

🔗

Medium External URL 外部 URL

https://zaraoutlet.top/collections/beauty_45c3ae7a

collect_10_links.py:19

🔗

Medium External URL 外部 URL

https://zaraoutlet.top/collections/woman-collection-blazers

collect_10_links.py:20

🔗

Medium External URL 外部 URL

https://zaraoutlet.top/collections/woman-collection-bodies

collect_10_links.py:21

🔗

Medium External URL 外部 URL

https://zaraoutlet.top/collections/woman-collection-cardigans-jumpers

collect_10_links.py:22

🔗

Medium External URL 外部 URL

https://zaraoutlet.top/collections/woman-collection-co-ord-sets

collect_10_links.py:23

🔗

Medium External URL 外部 URL

https://zaraoutlet.top/collections/woman-collection-dresses

collect_10_links.py:24

🔗

Medium External URL 外部 URL

https://zaraoutlet.top/collections/woman-collection-jackets

collect_10_links.py:25

🔗

Medium External URL 外部 URL

https://fashionstore.com/collections/women-clothing-dresses-summer-cotton

demo.py:50

🔗

Medium External URL 外部 URL

https://fashionstore.com/collections/men-accessories-watches-digital-smart

demo.py:51

🔗

Medium External URL 外部 URL

https://fashionstore.com/collections/kids-toys-educational-science-chemistry

demo.py:52

🔗

Medium External URL 外部 URL

https://fashionstore.com/collections/home-living-furniture-sofas-leather

demo.py:53

🔗

Medium External URL 外部 URL

https://fashionstore.com/collections/sports-fitness-equipment-weights-dumbbells

demo.py:54

🔗

Medium External URL 外部 URL

https://shop.test/collections/men-shirts-formal

demo.py:83

🔗

Medium External URL 外部 URL

https://store.demo/collections/kids-shoes-sneakers

demo.py:84

🔗

Medium External URL 外部 URL

https://zaraoutlet.top/collections/man-collection-shirts

examples/multilevel_usage.py:50

🔗

Medium External URL 外部 URL

https://zaraoutlet.top/collections/woman-collection-tops

examples/multilevel_usage.py:74

🔗

Medium External URL 外部 URL

https://zaraoutlet.top/collections/woman-collection-jeans

examples/multilevel_usage.py:75

🔗

Medium External URL 外部 URL

https://zaraoutlet.top/collections/man-collection-pants

examples/multilevel_usage.py:77

🔗

Medium External URL 外部 URL

https://zaraoutlet.top/collections/kids-collection-shoes

examples/multilevel_usage.py:78

🔗

Medium External URL 外部 URL

https://zaraoutlet.top/collections/kids-collection-clothes

examples/multilevel_usage.py:79

🔗

Medium External URL 外部 URL

https://zaraoutlet.top/collections/beauty-perfumes

examples/multilevel_usage.py:80

🔗

Medium External URL 外部 URL

https://lulumonclick-eu.shop/collections/men-men-clothes-t-shirts

examples/usage.md:11

🔗

Medium External URL 外部 URL

https://zaraoutlet.top/collections/woman-collection-dresses-summer

test_multilevel.py:54

🔗

Medium External URL 外部 URL

https://zaraoutlet.top/collections/man-collection-shirts-casual-longsleeve

test_multilevel.py:55

🔗

Medium External URL 外部 URL

https://zaraoutlet.top/collections/kids-collection-shoes-sneakers-running

test_multilevel.py:56

🔗

Medium External URL 外部 URL

https://zaraoutlet.top/collections/beauty-perfumes-women-floral

test_multilevel.py:57

🔗

Medium External URL 外部 URL

https://zaraoutlet.top/collections/woman-collection-co-ord-sets-beach

test_multilevel.py:58

🔗

Medium External URL 外部 URL

https://site1.com/collections/cat1

tests/test_collector.py:115

🔗

Medium External URL 外部 URL

https://site2.com/collections/cat2

tests/test_collector.py:116

File Tree

11 files · 32.2 KB · 1049 lines

Python 7f · 757L Markdown 3f · 285L JSON 1f · 7L

├─ ▾ 📁 config

│ └─ 📋 settings.json JSON 7L · 202 B

├─ ▾ 📁 examples

│ ├─ 🐍 multilevel_usage.py Python 100L · 3.0 KB

│ └─ 📝 usage.md Markdown 111L · 3.1 KB

├─ ▾ 📁 scripts

│ └─ 🐍 collect_categories.py Python 231L · 6.5 KB

├─ ▾ 📁 tests

│ └─ 🐍 test_collector.py Python 144L · 5.1 KB

├─ 🐍 collect_10_links.py Python 58L · 1.9 KB

├─ 🐍 demo.py Python 116L · 3.4 KB

├─ 📝 README.md Markdown 91L · 2.8 KB

├─ 📝 SKILL.md Markdown 83L · 2.9 KB

├─ 🐍 test_multilevel.py Python 74L · 2.5 KB

└─ 🐍 test_zara.py Python 34L · 839 B

Dependencies 5 items

Package	Version	Source	Known Vulns	Notes
`pandas`	`*`	pip	No	Standard CSV processing library, not version pinned but benign
`re`	`builtin`	stdlib	No	Python standard library
`urllib.parse`	`builtin`	stdlib	No	Python standard library
`os`	`builtin`	stdlib	No	Python standard library
`pathlib`	`builtin`	stdlib	No	Python standard library

Security Positives

✓ No credential harvesting or exfiltration

✓ No shell execution or subprocess usage

✓ No obfuscated code (base64, eval, etc.)

✓ No external script downloads (curl|bash, wget|sh)

✓ No sensitive file path access (~/.ssh, ~/.aws, .env)

✓ No network requests to external servers

✓ Documentation matches actual code functionality

✓ Uses standard pandas library for CSV generation

✓ All imports are from Python standard library or documented dependencies

Scan Report

Findings 1 items

File Tree

Dependencies 5 items

Security Positives