← 返回 Skills 市场

Skill

Name: Skill
Author: seenfinity

作者 Seenfinity · GitHub ↗ · v0.2.2

cross-platform ⚠ suspicious

587

总下载

当前安装

版本数

在 OpenClaw 中安装

/install tixflow

功能描述

AI-powered event assistant for discovering, booking, and coordinating event tickets. Integrates with KYD Labs protocol and Google Calendar.

安全使用建议

Do not provide API keys yet. Specific suggestions: - Verify the source: the registry lists no homepage; skill.json points to a GitHub repo—confirm the repo and maintainer before installing. - Ask the author to clarify which env vars are actually required (GOOGLE_MAPS_API_KEY, CROSSMINT_* appear in README/skill.json but are not declared in SKILL.md/registry). Only provide the minimum key(s) needed. - Note the usage example references './scripts/tixflow.js' but the code includes scripts/index.js — this mismatch could cause runtime errors or indicate stale/modified packaging; request an updated package or inspect the platform's installed files after install. - The included code is mock/demo-only (no real KYD or Google API calls in scripts/index.js), but comments say 'in production' it would call external APIs; if you plan to enable production mode, review network-call implementations first. - Prefer running in demo_mode or in a sandboxed environment and audit network traffic before supplying real credentials. - If you need the CrossMint or Google Maps features, ask the maintainer to explicitly declare those env vars in the skill manifest and provide justification. Given the metadata and file inconsistencies, treat this skill as untrusted until provenance and required permissions are clarified.

功能分析

Type: OpenClaw Skill Name: tixflow Version: 0.2.2 The skill bundle is benign as the core logic in `scripts/index.js` and `src/index.ts` is entirely mock-based. It explicitly states that production functionality (e.g., calling KYD Labs API, Google Calendar API) would be implemented, but the provided code does not perform any actual network requests, file system operations, or shell commands. While `googleapis` is listed as a dependency in `package.json`, it is not imported or utilized in the provided JavaScript code. There is no evidence of data exfiltration, malicious execution, persistence, obfuscation, or prompt injection attempts against the agent.

能力评估

⚠ Purpose & Capability

The skill declares Google Calendar and KYD Labs integration (GOOGLE_CALENDAR_API_KEY, KYD_API_KEY) which is coherent with its description. However other files (README.md and skill.json) reference additional capabilities (Google Maps, CrossMint cNFT minting) and related env vars (GOOGLE_MAPS_API_KEY, CROSSMINT_API_KEY, CROSSMINT_COLLECTION_ID) that are not declared in the registry metadata or SKILL.md requires list. There are also small metadata mismatches (skill.json homepage vs registry 'homepage: none'). These inconsistencies make it unclear what credentials and integrations are truly required.

⚠ Instruction Scope

SKILL.md instructs normal usage and mentions demo mode and an npm googleapis install. But example usage references './scripts/tixflow.js' which does not exist in the package (actual file is scripts/index.js). README instructs creating a .env with extra keys not declared elsewhere. The runtime instructions do not tell the agent to read unrelated system files, nor do the included JS/TS source files perform obvious exfiltration, but the mismatched examples and undocumented env requirements give the agent broad, unclear discretion.

ℹ Install Mechanism

There is no download-from-URL or extract install; the SKILL.md metadata suggests installing the 'googleapis' npm package and package.json lists it as a dependency. No high-risk external installers or obfuscated download steps are present. Still, the skill is instruction-only in the registry while including code files—installation behavior may depend on the platform's standard 'clawhub install' flow, so verify what gets written to disk.

⚠ Credentials

Registry and SKILL.md declare only GOOGLE_CALENDAR_API_KEY and KYD_API_KEY, which are reasonable. However README and skill.json list additional API keys (Google Maps, CrossMint, CrossMint collection ID) and tools that imply wallet detection and scraping — none of these extra env vars are declared in the registry 'requires.env'. This mismatch is concerning because the skill's manifest implies it may need more sensitive credentials than the registry advertises.

✓ Persistence & Privilege

The skill does not request 'always: true', does not claim to modify other skills or system-wide configs, and defaults to normal autonomous invocation. There is no installer that requests persistent system-level privileges in the provided files.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install tixflow
安装完成后，直接呼叫该 Skill 的名称或使用 /tixflow 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v0.2.2

- No visible changes detected in this version. - Functionality, usage, and documentation remain unchanged.

v0.2.0

tixflow v0.2.0 - Updated metadata and documentation in README.md. - No functional or code changes; this release is focused on documentation updates.

v0.1.0

Initial release of TixFlow: Your AI-powered event discovery and booking assistant. - Discover events by artist, location, date, or genre. - Book tickets across platforms and manage waitlists. - Sync event details to Google Calendar. - Compare ticket prices from various sources. - Runs in demo mode with mock data if API keys aren't provided.

元数据

Slug tixflow

版本 0.2.2

许可证 —

累计安装 0

当前安装数 0

历史版本数 3

常见问题

Skill 是什么？

AI-powered event assistant for discovering, booking, and coordinating event tickets. Integrates with KYD Labs protocol and Google Calendar. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 587 次。

如何安装 Skill？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install tixflow」即可一键安装，无需额外配置。

Skill 是免费的吗？

是的，Skill 完全免费（开源免费），可自由下载、安装和使用。

Skill 支持哪些平台？

Skill 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 Skill？

由 Seenfinity（@seenfinity）开发并维护，当前版本 v0.2.2。