ontopo
PassAudited by ClawScan on May 1, 2026.
Overview
This skill appears to do what it says: query Ontopo for restaurant search, availability, menus, and booking links without placing reservations or using user credentials.
This looks safe for its stated purpose. Before installing, be aware that it queries Ontopo over the network, installs the httpx dependency, and should not be allowed to run recurring checks unless you clearly approve the schedule and when it should stop.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Your restaurant search details may be sent to Ontopo when the skill checks live availability.
The skill sends restaurant searches, dates, times, and availability checks to Ontopo's API and obtains an anonymous token for API use.
BASE_URL = "https://ontopo.com/api" ... response = await self._request("POST", "/loginAnonymously", auth_required=False)Use it for reservation searches you are comfortable querying through Ontopo, and manually confirm any booking on the Ontopo website.
Installation depends on the current package resolved from the Python package ecosystem.
The skill depends on the external Python package httpx, and the artifact does not pin a specific package version.
"install": [{"kind": "uv", "package": "httpx", "label": "Install httpx via pip/uv"}]Install from a trusted package index and consider pinning or reviewing dependency versions in managed environments.
If you ask an agent to automate recurring checks, it may continue making repeated Ontopo queries and sending alerts until stopped.
The README encourages user-directed recurring availability checks, which could lead to ongoing agent activity if the host client supports scheduling.
Ask your AI agent to set up recurring checks: ... "Check every day and alert me if a table opens up at Mashya this month for 2 people"
Only enable recurring checks with a clear schedule, notification destination, and end date or stop instruction.