Local Business Appointment Agent

AI agent for local businesses to automate appointment scheduling, reminders, cancellations, and calendar integration.

Security Scan

The code implements the advertised appointment functionality and does not request credentials or network access, but there are small metadata and packaging inconsistencies worth verifying before use.

Purpose & Capability

The skill's name, description, SKILL.md usage, and index.js all align: a simple local CLI appointment scheduler. However, registry metadata claimed 'required binaries: none' and 'instruction-only', while the SKILL.md includes an 'openclaw' install hint requiring Node and the package.json and index.js are present. This mismatch is likely a packaging/metadata oversight but should be clarified.

Instruction Scope

The SKILL.md runtime instructions are limited to installing Node (npm install) and running node index.js. The index.js code is a local, interactive CLI that stores appointments in memory, asks for name/phone, and prints responses; it does not read environment variables, system files, or call external network endpoints. No broad or vague data-collection instructions were found.

Install Mechanism

There is no remote download-of-arbitrary-code: package.json is present and npm install is suggested. The package.json has no dependencies and index.js is included in the bundle, so installation is low-risk. The inconsistency is that the registry metadata reported 'No install spec — instruction-only' while SKILL.md contains an install hint for Node; this is a minor packaging inconsistency rather than a technical risk.

Credentials

The skill requests no environment variables, no credentials, and no config paths. The runtime asks users for phone numbers and names (expected for scheduling) but does not persist them beyond in-memory storage or transmit them. This is proportionate to the stated purpose.

Persistence & Privilege

The skill is not marked 'always: true' and uses no elevated privileges or system-wide configuration changes. It does not attempt to modify other skills or agent settings. Autonomous invocation is allowed by default but is not combined with other high-risk behaviors here.

What to consider before installing

This skill's code appears to do what it says (a simple, local CLI appointment helper) and does not request secrets or perform network I/O. Before installing, consider: 1) Verify the source — the package has no homepage and the publisher ID is unknown. 2) Confirm the metadata mismatch: registry said 'instruction-only' but SKILL.md and files include Node and code; treat this as a packaging inconsistency and prefer installing from a trusted source. 3) Run the code in an isolated/test environment first (or inspect the files locally) to confirm there are no hidden network calls. 4) If you plan to use real customer data (names/phone numbers), add proper storage and privacy controls — the current implementation only keeps data in-memory and does not provide persistence or secure handling.

---

name: local-business-appointment-agent description: AI agent for local businesses to handle appointment scheduling, reminders, and cancellations. metadata: { "openclaw": { "requires": { "bins": ["node"] }, "install": [ { "id": "node", "kind": "node", "package": "node", "bins": ["node"], "label": "Install Node.js", }, ], }, }

AI agent for local businesses (salons, clinics, etc.) to automate appointment scheduling, reminders, and cancellations.

Features

• 24/7 appointment booking via chat
• Automated reminders (SMS/email)
• Cancellation and rescheduling handling
• Calendar integration (Google Calendar, Outlook)

Usage

1. Configure business hours and services
2. Connect calendar
3. Deploy to website or messaging platform

Installation

npm install

Start

node index.js