Breesy Restoration Connect

PassAudited by VirusTotal on May 6, 2026.

Overview

Type: OpenClaw Skill Name: breesy-restoration-connect Version: 1.0.0 The skill is designed to facilitate property restoration service requests by submitting customer-provided data to a legitimate-appearing endpoint (breesy-connect.com). It includes clear instructions for the agent regarding user consent and required fields (e.g., callbackPhone, serviceLocation) necessary for its stated purpose, with no evidence of malicious intent, obfuscation, or unauthorized data access in SKILL.md or _meta.json.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Submitting a request may cause Breesy or its partners to contact the customer about restoration services.

Why it was flagged

The skill can create a real external service request through an unauthenticated POST endpoint. This is purpose-aligned, but the action should only occur after user/customer approval.

Skill content
Use `submitRestorationRequest` to submit a customer-authorized restoration request. Endpoint: `POST https://breesy-connect.com/api/requests` Authentication is not required.
Recommendation

Confirm the customer explicitly authorized the request and verify the details before submission.

What this means

Customer phone number, location, and damage details may be shared with Breesy Restoration Connect and its restoration partners.

Why it was flagged

The required request fields include personal contact and location information that will be sent to an external service.

Skill content
Required Fields - `serviceLocation` ... `details` ... `callbackPhone`
Recommendation

Only provide information the customer agrees to share, and avoid including unrelated sensitive details in the damage description.

What this means

The reviewed SKILL.md is simple, but the live remote API documentation or instructions could affect how an agent uses the service.

Why it was flagged

The skill points to remote API and agent instruction resources that were not included in the reviewed artifact set and may change independently.

Skill content
OpenAPI: https://breesy-connect.com/openapi.json; Agent instructions: https://breesy-connect.com/llms.txt; Agent manifest: https://breesy-connect.com/.well-known/agent.json
Recommendation

Review the linked API and instruction documents if you need stronger assurance about current behavior.