Ziptax Sales Tax

Look up U.S. sales tax rates using the ZipTax API. Use when the user asks about sales tax rates, tax calculations for a U.S. address/ZIP code/coordinates, freight or service taxability, jurisdiction-level tax breakdowns, use tax vs sales tax, or needs to integrate sales tax data into an application. Also handles account usage metrics and product taxability codes (TIC). Supports address-level (door-level), lat/lng, and postal code lookups across 12,000+ jurisdictions.

Before installing: (1) Verify the source and owner — the skill has no homepage and the source is unknown. (2) Expect to provide an API key (ZIPTAX_API_KEY); the SKILL.md and scripts require it but the registry metadata does not declare it — confirm whether the platform will store or transmit that key. (3) The bundled script calls api.zip-tax.com via curl and requires python3; ensure those binaries are present and acceptable. (4) If you want to use this skill, ask the publisher to update the registry metadata to declare ZIPTAX_API_KEY as a required credential and list required binaries (curl, python3). (5) If you are concerned about secrets, create a dedicated ZipTax key with limited quota and monitor usage after enabling the skill.

Type: OpenClaw Skill Name: ziptax Version: 1.0.0 The skill bundle is designed to interact with the ZipTax API for sales tax lookups. All network requests are directed to the legitimate `api.zip-tax.com` domain. The `scripts/lookup.sh` script properly sanitizes user-provided address input using `python3 -c "import urllib.parse; print(urllib.parse.quote('$ADDRESS'))"` to prevent shell injection. The `ZIPTAX_API_KEY` is read from an environment variable and used as expected for API authentication, with no evidence of exfiltration to unauthorized destinations. No prompt injection attempts, obfuscation, or other malicious behaviors were found in `SKILL.md` or other files.