Cliento Booker
v1.0.5Register Cliento booking pages via URL, check availability, and execute actual service bookings. Use when the user asks to book a haircut, reserve a service,...
⭐ 0· 155·1 current·1 all-time
byPatrik Ekenberg@patello
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match what the skill does: the SKILL.md and scripts/cliento.py implement registering booking pages, fetching slots, reserving, and confirming bookings. Required binary (python3) is appropriate. The script targets cliento.com/web.prod.cliento.com endpoints which align with the booking purpose. The SKILL.md correctly documents that it uses reverse-engineered/undocumented endpoints (fragility risk but coherent).
Instruction Scope
Runtime instructions stay within the booking domain: they direct use of scripts/cliento.py to fetch HTML and call specific API endpoints, manage a workspace stores.json, and read/write (with consent) USER.md contact details. The skill explicitly requires asking the user before finalizing live bookings and recommends using a separate calendar tool for cross-referencing.
Install Mechanism
No install spec; the skill is instruction-only with a small included Python script. Nothing is downloaded from remote URLs or installed to system locations. Risk from install mechanism is low.
Credentials
The skill requests no environment variables or external credentials (none declared). It does read and persist workspace files: ./ .cliento/stores.json and USER.md (the latter may contain personal contact info). The SKILL.md does not declare these config paths in registry metadata, but they are workspace-local and related to the skill’s purpose; users should be aware this will access and may write personal contact info if the user consents.
Persistence & Privilege
always is false and model invocation is allowed (default). The skill can be invoked autonomously by the agent; because it performs live network actions that can temporarily reserve or finalize bookings, ensure the agent enforces the SKILL.md requirement to always ask the user before confirming bookings. There is no request to modify other skills or system-wide settings.
Assessment
This skill appears to do what it says, but review and consider the following before installing:
- It will read and write workspace files: ./ .cliento/stores.json and USER.md. Make sure USER.md does not contain secrets you don't want the skill to access; the skill may store personal contact details if you agree.
- The helper script calls cliento.com / web.prod.cliento.com endpoints (reverse-engineered APIs); functionality may break and you should verify these endpoints are legitimate for your use.
- Because the agent may be allowed to invoke the skill autonomously, ensure policies or prompts prevent automatic finalization of bookings without explicit, per-booking user confirmation.
- If you want extra safety, run the skill in a constrained environment (sandbox or workspace copy) and inspect the included scripts yourself before granting it access to your primary workspace files.Like a lobster shell, security has layers — review code before you run it.
latestvk970k7yj8htk5smvb1e3tzs8y983nrk1
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binspython3