Tour Booking
PassAudited by ClawScan on May 1, 2026.
Overview
The skill is coherent for booking property-showing calls, but live mode can place real outbound calls through ElevenLabs using user data and API credentials, so payloads should be reviewed before use.
Install only if you intend to let the agent prepare or place property-showing calls. Keep live mode approval-controlled, review the dry-run payload for the phone number, client name, address, and requested times, and use a properly scoped ElevenLabs API key.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If run in live mode, the skill may call listing offices and request or confirm property showing slots.
The skill explicitly supports a live action that places outbound calls. This is expected for the skill, but it can contact third parties and influence showing appointments.
Live mode: ```bash python3 scripts/place_outbound_call.py \ --payload /tmp/call-payload.json \ --output /tmp/call-result.json \ --live ```
Use the documented dry-run first, inspect the prepared payload and destination phone number, and only run live mode after approval.
The skill can use the configured ElevenLabs account to submit outbound call requests when live mode is selected.
Live calling depends on ElevenLabs account credentials. This is purpose-aligned, but the registry metadata does not declare required credentials or environment variables.
api_key = os.environ.get("ELEVENLABS_API_KEY")
agent_id = os.environ.get("ELEVENLABS_AGENT_ID")Provide a scoped ElevenLabs key if possible, keep it out of logs, and verify the configured outbound endpoint before live use.
Malformed or adversarial listing data could affect what the calling agent says or asks during a live call.
Listing and client-provided fields are embedded directly into the downstream call prompt. If those fields contain instruction-like text, they could influence the voice agent's behavior.
f"slots for {listing['address']} for client {job['client_name']}. "
f"Preferred windows: {job.get('preferred_windows_text', 'not provided')}. "Validate or sanitize job fields, delimit them clearly as data, and inspect the dry-run payload before allowing live calls.