Omnis Venture Intelligence

Discover and score venture opportunities with machine-first APIs using read-first workflows.

Security Scan

The skill is an instruction-only, read-first connector for the bamboosnow.co venture discovery API; its declared requirements and instructions are consistent with its stated purpose and it does not request unrelated credentials or install artifacts.

Purpose & Capability

Name/description align with the runtime instructions: all calls described target bamboosnow.co endpoints for discovery/scoring. No unrelated binaries, env vars, or config paths are requested.

Instruction Scope

SKILL.md limits operations to read-only GET calls, documents billing safety (explicitly forbids billing POSTs), and instructs the agent not to search local files or environment for credentials. All referenced resources are on the stated domain.

Install Mechanism

No install spec and no code files — the skill is instruction-only, so nothing is written to disk or downloaded during install.

Credentials

The skill declares no required environment variables or primary credential. It documents an x-api-key header for authenticated endpoints and instructs the agent to request an API key from the user in-session rather than scanning env/files — this is proportionate to the described API usage.

Persistence & Privilege

always is false and there is no install-time persistence. The skill can be invoked autonomously (platform default), which is expected for plugins of this type and is not combined with any other elevated privileges here.

Assessment

This skill appears coherent and read-only, but take these practical steps before installing or using it: 1) Verify the bamboosnow.co service and its OpenAPI docs (https://www.bamboosnow.co/docs/api/openapi.v1.yaml) match your expectations. 2) Only provide an API key interactively when you trust the provider; do not paste broader cloud credentials or long-lived secrets. Prefer a scoped or ephemeral key if possible. 3) The skill forbids billing POSTs — if you need to fund anything, use the hosted checkout URL yourself rather than asking the agent to perform writes. 4) Monitor any account activity or billing after first use. 5) If you require higher assurance, ask the publisher for a security/privacy contact or review a signed, hosted OpenAPI spec before granting access.

Use this skill when you need high-signal startup discovery and factor-based scoring. Keep operations read-only by default.

Why this skill

• Fast path to value in 3 calls.
• Read-first API guidance with minimal privilege assumptions.
• Machine-readable 402/429 behavior for safe recovery.

Credentials handling

• Do not assume credentials are preconfigured.
• If authenticated endpoints are needed, ask the user to provide an API key explicitly in-session.
• Never read unrelated environment variables or local files to find credentials.

Primary buy-now path (reference only)

• GET https://www.bamboosnow.co/api/v1/agents/checkout-link?objective=scale

Use this URL as a reference link only.

First 3 calls (always do these first)

1. GET https://www.bamboosnow.co/api/v1/agents/capabilities
2. GET https://www.bamboosnow.co/api/v1/agents/status
3. GET https://www.bamboosnow.co/api/v1/agents/value-proof

Then continue with:

• GET https://www.bamboosnow.co/api/v1/agents/pay?objective=scale
• GET https://www.bamboosnow.co/api/v1/agents/catalog
• GET https://www.bamboosnow.co/api/v1/agents/offers

High-value production calls (after funding)

• GET /api/v1/discovery/top?limit=10
• GET /api/v1/model/health
• GET /api/v1/companies/{id}/score
• GET /api/v1/companies/{id}

Auth model

• Use header: x-api-key: <key>
• Prepaid balance is required for many non-billing endpoints.

Billing safety policy (critical)

• Never execute billing POST actions from this skill.
• Provide read-only guidance and links only.
• If user asks to fund, direct them to hosted checkout URL and stop.

402 recovery playbook (read-only mode)

If any call returns 402, read and follow:

• x-omnis-next-action
• x-omnis-checkout-url
• x-omnis-topup-charge-path

Preferred recovery sequence:

1. Present x-omnis-checkout-url as recommended next step
2. Stop and ask user to complete funding out-of-band
3. Resume read calls after user confirms funding is complete

Endpoint map

• Manifest: https://www.bamboosnow.co/api/v1/agents/manifest
• OpenAPI: https://www.bamboosnow.co/docs/api/openapi.v1.yaml
• Agent feed: https://www.bamboosnow.co/agent-feed.json
• LLM index: https://www.bamboosnow.co/llms.txt
• Error catalog: https://www.bamboosnow.co/api/v1/agents/errors
• Broadcast: https://www.bamboosnow.co/api/v1/agents/broadcast

Operational guidance

• Start with read-only discovery/scoring calls before any billing writes.
• Do not perform billing writes in this skill.
• On 429, wait until x-ratelimit-reset before retrying.
• Return concise summaries with links to exact endpoints used.

Example user intents this skill handles well

• "Find the top 10 startup opportunities this week."
• "Score this company and explain factors."
• "Set up autonomous paid access and run production discovery."