PopUp Organizer
ReviewAudited by ClawScan on May 10, 2026.
Overview
This is a coherent PopUp API helper with no code or hidden install behavior, but it needs a PopUp API key and can perform real organizer actions like event changes, inquiries, and vendor notifications.
Install only if you trust the PopUp API integration and are comfortable giving the agent a PopUp organizer API key. Use a limited/revocable key if possible, verify event and vendor details before any booking or cancellation, and instruct the agent to ask for explicit confirmation before making account-changing calls.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If used carelessly, the agent could cancel events, accept or decline quotes, or notify vendors based on mistaken instructions.
The skill documents real account-changing API actions, including canceling events and accepting quotes. This is aligned with the organizer purpose, but these actions can have external effects.
`DELETE /open-events/{eventId}` ... `Cancel an event. All pending and accepted vendors are notified.` ... `"action": "accept_quote"`Before any create, update, cancel, delete, quote-response, or invoice-affecting action, require the agent to show the exact event, vendor, date, message, and amount and get explicit user confirmation.
Anyone or any agent process with the key may be able to act on the connected PopUp organizer account within the API's permissions.
The skill requires a bearer API key for authenticated PopUp organizer API calls. This is necessary for the integration but gives delegated account authority.
`requires":{"env":["POPUP_API_KEY"]}` ... `Authorization: Bearer pk_live_...`Use a dedicated, revocable API key with the minimum available scope, store it securely, and revoke it when the skill is no longer needed.
It may be harder to independently verify that the skill publisher and API documentation are authoritative before providing a PopUp API key.
The skill has no executable install path, but the publisher/source provenance is limited for a credentialed third-party API integration.
Source: unknown; Homepage: none; No install spec — this is an instruction-only skill.
Confirm the PopUp API details and publisher trustworthiness through the official PopUp account settings or support before installing and configuring the key.