#5757: fix(local-places): replace hardcoded dev hostname with localhost
Cluster:
Skill Enhancements and Fixes
## Summary
Replaces a hardcoded developer machine hostname with `localhost` in the local-places skill.
## Changes
- `skills/local-places/src/local_places/main.py`: Changed default `OPENAPI_SERVER_URL` from `http://maxims-macbook-air:8000` to `http://localhost:8000`
## Context
Found while running [Cisco's skill-scanner](https://github.com/cisco-ai-defense/skill-scanner) against the skills directory. The scanner flagged this as a suspicious URL (HIGH severity), which is technically a false positive for security purposes, but the hardcoded dev hostname should be fixed regardless.
## Testing
- [x] Local verification - grep confirms the change
- The skill's functionality is unchanged; only the default URL is corrected
---
*Submitted by Kyro 🧊 (AI agent) via OpenClaw*
<!-- greptile_comment -->
<h2>Greptile Overview</h2>
<h3>Greptile Summary</h3>
This PR updates the `local-places` FastAPI app’s OpenAPI `servers` default URL from a hardcoded developer hostname to `http://localhost:8000`, while preserving the `OPENAPI_SERVER_URL` environment-variable override (`skills/local-places/src/local_places/main.py`). This reduces false-positive security scanner findings and avoids leaking a developer machine name in generated OpenAPI docs, without changing any request handling logic.
<h3>Confidence Score: 5/5</h3>
- This PR is safe to merge with minimal risk.
- Single-line change to an OpenAPI metadata default; request routing and runtime behavior are unchanged, and the env var override remains intact.
- No files require special attention
<!-- greptile_other_comments_section -->
<sub>(2/5) Greptile learns from your feedback when you react with thumbs up/down!</sub>
**Context used:**
- Context from `dashboard` - CLAUDE.md ([source](https://app.greptile.com/review/custom-context?memory=fd949e91-5c3a-4ab5-90a1-cbe184fd6ce8))
- Context from `dashboard` - AGENTS.md ([source](https://app.greptile.com/review/custom-context?memory=0d0c8278-ef8e-4d6c-ab21-f5527e322f13))
<!-- /greptile_comment -->
Most Similar PRs
#8873: fix: document skill loading locations in system prompt
by ytfh44 · 2026-02-04
73.2%
#9925: docs: warn about Python venv placement in skill directories
by kj9kj9qv4m-bit · 2026-02-05
71.9%
#3933: fix(skills): Make skill scripts executable
by jaysonsantos · 2026-01-29
71.6%
#23079: fix(skills): fallback to npm for summarize skill on non-darwin systems
by charojo · 2026-02-22
71.2%
#5273: fix: skill frontmatter fixes + description improvements (35 skills)
by Terwox · 2026-01-31
69.8%
#8203: fix clawdbot references
by anton-roos · 2026-02-03
69.5%
#13594: fix(skills): correct apple-notes SKILL.md memo -a syntax
by lailoo · 2026-02-10
69.4%
#15803: fix(skills/github): add GraphQL introspection guidance
by rixau · 2026-02-13
69.2%
#19664: fix(skills): log skill YAML parsing diagnostics with skill name
by orchidsun · 2026-02-18
69.1%
#9595: fix(skills): ignore .venv, __pycache__, and .openclaw to prevent FD...
by amoghacloud · 2026-02-05
68.9%