book anything
v1.4.2Searches for businesses (restaurants, salons, clinics, hotels) and books appointments via AI phone calls. Also cancels, reschedules, and makes merchant inqui...
⭐ 1· 60·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (book restaurants, salons, etc. via AI phone calls) align with the runtime instructions and required environment variable. Requiring a LIFECLAW_API_TOKEN is appropriate for a third‑party booking API; no unrelated credentials or system binaries are requested.
Instruction Scope
SKILL.md is instruction-only and tells the agent to call the LifeClaw REST API (search, detail, book/phone, poll results). That matches the stated purpose, but the instructions explicitly require sending user-supplied PII (name, contact_phone, booking details) to the external service and will initiate phone calls. The skill also instructs getting tokens via a Telegram bot. There are no instructions to read local files or secrets beyond the declared LIFECLAW_API_TOKEN.
Install Mechanism
No install spec or code is included (instruction-only), so the skill writes nothing to disk and does not pull external binaries. This is the lowest install risk.
Credentials
Only a single credential (LIFECLAW_API_TOKEN) is required and is the primary credential used for Authorization header. No additional unrelated environment variables or config paths are requested. The token will be sent to the documented LifeClaw API endpoint as expected.
Persistence & Privilege
always is false (no forced inclusion) and model invocation is allowed (default). The skill does not request elevated system persistence or modify other skills' configs. Autonomous invocation is normal here and not combined with other privilege red flags.
Assessment
This skill is internally consistent with its stated purpose, but it relies entirely on an external service you must trust. Before installing: (1) Confirm you trust https://api-v2.lifeclaw.agentese.ai and the LifeClaw operator (the token provider is a Telegram bot). (2) Understand that bookings will send personal data (name, contact phone, possibly special requests) and that the service will place real phone calls on your behalf; check privacy, data retention, and whether calls are recorded. (3) Be aware of pricing (phone calls are billed by the minute) and potential costs on your account. (4) Store the LIFECLAW_API_TOKEN securely, use a dedicated token/account if possible, and know how to revoke/rotate it (via the Telegram bot). (5) Because there is no code to inspect, you cannot audit the backend behavior — treat this as a network-exposing integration and limit use if you have sensitive requirements. If you need higher assurance, request the service's privacy/security documentation or use a sandbox/dummy token first.Like a lobster shell, security has layers — review code before you run it.
latestvk9784m6e5e5mgq714qcfaxcq8n84h7mc
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📞 Clawdis
EnvLIFECLAW_API_TOKEN
Primary envLIFECLAW_API_TOKEN