Race Finder
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: race-finder Version: 1.0.0 The skill bundle is benign. All files consistently describe an API for finding races, with `SKILL.md` providing the API definition and agent instructions. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the agent. The 'Tips for Agents' in `SKILL.md` are helpful and align with the stated purpose, guiding the agent to use the `https://api.racefinder.net` API and `runsignup.com` for registration links.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If you search using a specific city or zipcode, that search information is sent to RaceFinder's API.
Race searches, including location-related parameters, are sent to an external API. This is disclosed and purpose-aligned, but users should know their search criteria leave the local agent.
**Base URL:** `https://api.racefinder.net` ... `zipcode` ... `radius` ... `city` ... `state`
Use the skill only if you are comfortable sharing race-search criteria with RaceFinder; avoid highly sensitive location queries if that matters to you.
Registration links may include referral or tracking parameters when you click through to sign up.
The sample registration URL includes an affiliate/tracking-style parameter. This fits a race-registration link service, but the user-facing description does not explicitly call out possible affiliate or tracking parameters.
"register_url": "https://runsignup.com/Race/12345?rsu_aff=..."
Review registration URLs before using them, and disclose to users when a link appears to contain affiliate or tracking parameters.