Urban Sports Club Booking API

v1.0.1

Scan Urban Sports Club venues, list courses with booking links, and book or cancel courses using your USC login credentials.

0· 1.2k·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/behavior align: SKILL.md and scan.py implement a Playwright-based scanner and booking/canceling flows for urbansportsclub.com. No unrelated services, binaries, or credentials are requested by the package metadata.
Instruction Scope
Runtime instructions focus on installing Playwright/Chromium, creating credentials.json, and running scan.py. The instructions and code operate on urbansportsclub.com pages and local config/credentials only; they do not instruct reading unrelated system files or calling unexpected endpoints.
Install Mechanism
There is no install spec in the registry; the SKILL.md asks the user to create a Python venv and install Playwright which will download Chromium. This is expected for a browser-automation tool but does entail downloading browser binaries at install time.
Credentials
No environment variables or external service credentials are requested. The skill uses a local credentials.json file (email/password) for site login — appropriate and proportional to the booking functionality.
Persistence & Privilege
Skill is not forced-always-enabled (always: false) and does not request system-wide changes. It does use autonomous invocation by default (disable-model-invocation: false), which is the platform default and acceptable here given no other red flags.
Assessment
This skill is coherent with its stated purpose, but before installing: (1) do not store real passwords in a tracked repo — keep credentials.json out of version control and use a secure local store if possible; (2) expect Playwright to download Chromium and native dependencies when you run the install steps; (3) review scan.py yourself (it runs a headless browser and will log in to perform bookings/cancellations on your behalf); (4) if you ever suspect compromise, remove the local credentials file and change your USC password; (5) run the tool in an isolated environment (a dedicated venv or container) if you want to reduce risk to your primary system.

Like a lobster shell, security has layers — review code before you run it.

latestvk97b8pgew8f1mmtrtj2ckehxed80vc9g

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments