Luma Events
PassAudited by ClawScan on May 1, 2026.
Overview
This skill appears to fetch public Luma event listings as advertised, but it intentionally keeps a local cache of fetched events that may reveal city or event interests.
This looks safe for fetching public Luma listings. Before installing, be comfortable with outbound requests to lu.ma and with a local event cache being kept for follow-up use; clear the memory file if you do not want those records retained.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
You have less external context for who maintains the skill or where updates originate.
The registry entry provides limited external provenance for the skill, although the supplied files do not show remote installers, hidden dependencies, or obfuscated code.
Source: unknown Homepage: none
Review the included files before installation and re-review future updates, especially because the source and homepage are not provided.
Your queried cities or event interests may remain in a local memory file and influence later answers.
The skill intentionally creates persistent local memory from fetched event data. The path and retention are disclosed, but persisted event data can reflect cities or events the user asked about and may be reused later.
Always save fetched events to `~/clawd/memory/luma-events.json` for future reference. ... Keep events for next 60 days only
Use the skill only if this local retention is acceptable; inspect or delete ~/clawd/memory/luma-events.json if you do not want those event records kept.