ClawHub

Vacation Rental Management

v1.0.0

Manage vacation rental turnovers, guest reservations, and cleaning schedules. Auto-schedule cleanings based on guest check-out, coordinate multi-property tur...

⭐ 0· 47·0 current·0 all-time
by@mchusma
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (vacation rental turnovers, scheduling, checklists) match the declared requirement (TIDY API token) and the SKILL.md content, which exclusively documents TIDY CLI/MCP/REST endpoints and workflows. No unrelated credentials or tools are requested.
ℹ
Instruction Scope
SKILL.md instructs the agent to call TIDY's CLI, MCP, or REST API and to poll asynchronous 'message_tidy' requests until completion. It also documents that the CLI will read TIDY_API_TOKEN or store credentials at ~/.config/tidy/credentials; those are reasonable for this integration but mean the agent/CLI may write/read a local credentials file and will perform repeated polling requests. There are no instructions to collect system-wide secrets or read unrelated files.
✓
Install Mechanism
This is an instruction-only skill with no install spec or code. Examples reference installing an existing, named CLI via Homebrew or npm (tidy-request / @tidydotcom/cli). Nothing is downloaded or executed by the skill bundle itself.
ℹ
Credentials
Only one environment variable is required: TIDY_API_TOKEN (declared as primary). That is proportionate. The documentation states tokens 'do not expire' and that the CLI may store credentials on disk (~/ .config/tidy/credentials), which is a security consideration for users — persistent tokens increase blast radius if leaked, but this is a product design choice rather than an incoherence in the skill.
✓
Persistence & Privilege
The skill does not request always:true or any elevated platform privileges. It does not modify other skills or system-wide settings according to the provided files. Autonomous model invocation is allowed (default) which is expected for a tool-like skill.
Assessment
This skill appears to be a straightforward integration with TIDY (https://tidy.com) and only needs your TIDY_API_TOKEN. Before installing: verify the TIDY domain and that you trust the service; consider creating a token with the least privileges possible; be aware the CLI may store the token in ~/.config/tidy/credentials (persistent tokens here do not expire per docs), so protect that file and your environment; avoid embedding highly sensitive data (gate codes, passwords) in public fields unless you accept that TIDY will store/transmit them; and remember the agent can perform actions like booking/cancelling cleanings using your token, so revoke the token if you suspect misuse.

Like a lobster shell, security has layers — review code before you run it.

latestvk978p4aswmym04g3hwvvfby7sx83x95g

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🏖️ Clawdis
OSmacOS · Linux
EnvTIDY_API_TOKEN
Primary envTIDY_API_TOKEN

Comments