venue-polling

Use this skill when the user wants to poll gym venue availability, inspect or modify the `venue_polling.py` order-signing flow, or run the bundled signature...

This skill appears to do what it says (poll venue availability and help debug signing), but it reads a local rsa_private_key.pem and contains a hardcoded API token — neither of which are declared in the metadata. Before running it: (1) review the code yourself or have someone you trust review it; (2) do not place your real private key or production tokens in the working directory unless you trust the code and the remote endpoint; (3) remove or replace the hardcoded TOKEN and prefer an environment variable if you must supply credentials; (4) run signature-replay and verification helpers offline first (they won't contact the network) before enabling AUTO_BOOK; (5) run the scripts in an isolated environment (container/VM) and monitor outbound network traffic; and (6) be aware running venue_polling.py with AUTO_BOOK=True will attempt to create real orders on the external service, which could have financial or account consequences.

Type: OpenClaw Skill Name: venue-polling Version: 1.0.0 The skill bundle is a specialized toolset for automating and debugging gym venue bookings on the 'shop.chuanshatiyuchang.cn' platform. It contains scripts for polling availability (`venue_polling.py`), verifying RSA signatures (`public_key_verify_test.py`), and replaying requests (`signature_replay_test.py`). While the code performs automated network requests and requires a local RSA private key, its behavior is transparent, well-documented, and strictly aligned with the stated purpose of gym booking automation without any indicators of data exfiltration, system persistence, or malicious intent.