Vatgentic

Instant EU VAT validation with Lightning Bitcoin. 10 sats per lookup. No subscriptions.

This skill generally does what it says (request a VAT check and return a Lightning invoice), but there are several inconsistencies and transparency gaps you should address before using it: - Do not provide auto-pay credentials (LNBOT_API_TOKEN / LNBOT_WALLET_ID) unless you fully trust the author and the endpoint. Auto-pay can move real funds. - The scripts require VATGENTIC_API_URL but the registry metadata did not declare it; SKILL.md suggests an unfamiliar host (https://fair-earwig.pikapod.net). Verify the canonical service URL (official vatgentic domain) and change VATGENTIC_API_URL to a known/trusted endpoint before using. - README mentions reading ~/.openclaw/secrets/lnbot-api.json and other workspace files, but the shipped scripts do not actually read that file. Confirm which files the skill will read in your environment and search the code for any hidden file reads before trusting it. - If you want to use auto-pay, inspect scripts (vatgentic-validate.py / vatgentic-request.py) yourself or run them in a sandbox to confirm they only send the VAT number and invoice/payment info to the configured API and do not exfiltrate other data. - Prefer manual payment (do not set auto-pay) during initial testing and run a few lookups with minimal amounts to confirm behavior and responses. Monitor network activity to ensure requests go to the expected host. - Ask the publisher for clarifications: authoritative homepage/docs, reason for the fair-earwig.pikapod.net host, and an updated SKILL.md/metadata that declares required env vars and file access. Given the mismatches (undeclared required env var, unknown endpoint, and documentation/code drift), treat this skill as suspicious until the above clarifications are provided or you confirm behavior in a sandbox.

Type: OpenClaw Skill Name: vatgentic Version: 1.0.0 The VatGentic skill bundle provides a utility for EU VAT validation using Lightning Network (Bitcoin) micro-payments. The Python scripts (vatgentic-request.py, vatgentic-status.py, and vatgentic-validate.py) facilitate a workflow where a user requests a VAT check, receives a Lightning invoice, and polls for the result once paid. While the scripts handle sensitive environment variables like LNBOT_API_TOKEN for automated payments, this functionality is transparently documented and directly supports the stated purpose of the tool. No evidence of data exfiltration, unauthorized execution, or malicious prompt injection was found.