Game Tickets - Buy tickets with your credit card

Let your agent shop tickets online with owner approval.

This skill appears to be a general-purpose CreditClaw payment integration rather than a narrowly-scoped 'game tickets' helper — that naming/metadata mismatch and version inconsistencies are the primary red flags. Before installing: 1) Verify the vendor (creditclaw.com) and that you intended to install CreditClaw rather than a ticket-specific tool. 2) Check the company/site (contact, privacy, support, docs) and confirm the API host matches the manifest. 3) If you proceed, use an API key tied to a test or low-value wallet with strict spending limits and the strictest approval_mode (ask_for_everything). 4) Do not share your real production payment credentials; rotate keys after testing. 5) Be cautious about running the provided curl commands that write into ~/.creditclaw — inspect downloaded files before saving/executing. 6) Monitor logs and owner dashboards for any unexpected purchase attempts. The skill is coherent enough to be useful, but these mismatches and the fact it can initiate real payments justify caution and verification.

Type: OpenClaw Skill Name: tickets Version: 1.2.5 The skill bundle facilitates financial transactions for AI agents via the CreditClaw service. While it includes extensive security documentation and server-side guardrails, it is classified as suspicious due to instructions in SKILL.md that direct the agent to execute shell commands (mkdir, curl) to download and save additional markdown files to the local filesystem. This 'self-installation' pattern creates a risk of Remote Instruction Execution if the source domain (creditclaw.com) is compromised. No clear evidence of intentional malice was found, but the capability for the agent to fetch and persist remote instructions is a high-risk behavior.