Skill

AI-powered event assistant for discovering, booking, and coordinating event tickets. Integrates with KYD Labs protocol and Google Calendar.

Do not provide API keys yet. Specific suggestions: - Verify the source: the registry lists no homepage; skill.json points to a GitHub repo—confirm the repo and maintainer before installing. - Ask the author to clarify which env vars are actually required (GOOGLE_MAPS_API_KEY, CROSSMINT_* appear in README/skill.json but are not declared in SKILL.md/registry). Only provide the minimum key(s) needed. - Note the usage example references './scripts/tixflow.js' but the code includes scripts/index.js — this mismatch could cause runtime errors or indicate stale/modified packaging; request an updated package or inspect the platform's installed files after install. - The included code is mock/demo-only (no real KYD or Google API calls in scripts/index.js), but comments say 'in production' it would call external APIs; if you plan to enable production mode, review network-call implementations first. - Prefer running in demo_mode or in a sandboxed environment and audit network traffic before supplying real credentials. - If you need the CrossMint or Google Maps features, ask the maintainer to explicitly declare those env vars in the skill manifest and provide justification. Given the metadata and file inconsistencies, treat this skill as untrusted until provenance and required permissions are clarified.

Type: OpenClaw Skill Name: tixflow Version: 0.2.2 The skill bundle is benign as the core logic in `scripts/index.js` and `src/index.ts` is entirely mock-based. It explicitly states that production functionality (e.g., calling KYD Labs API, Google Calendar API) would be implemented, but the provided code does not perform any actual network requests, file system operations, or shell commands. While `googleapis` is listed as a dependency in `package.json`, it is not imported or utilized in the provided JavaScript code. There is no evidence of data exfiltration, malicious execution, persistence, obfuscation, or prompt injection attempts against the agent.