Travel Agent Skill
v2.4.1Find, book, and change flights for your human via email. One message, and done. (by BonBook)
⭐ 3· 3.5k·4 current·4 all-time
byBonBook@aszelem
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (book and manage flights via email) match the runtime instructions: the skill requires the agent to send/receive emails to book@bonbook.co and optionally perform web form/account setup with explicit human approval. No unrelated credentials, binaries, or install actions are requested.
Instruction Scope
SKILL.md confines actions to sending plain-text requests to book@bonbook.co, reading inbound confirmations, and optionally guiding the human through website form completion. It explicitly requires human consent for PII/payment entry and instructs agents to hand off when consent is unclear — no instructions to read unrelated files, env vars, or system state are present.
Install Mechanism
There is no install spec and no code files; the skill is instruction-only, so nothing will be written to disk or downloaded. This is the lowest-risk install profile and appropriate for an email-based integration.
Credentials
The skill declares no environment variables, credentials, or config paths. It relies on the agent's preexisting email send/receive permissions (declared as prerequisites in SKILL.md), which is proportional to the described purpose.
Persistence & Privilege
The skill sets disable-model-invocation: true and require-explicit: true, has no persistence, and does not request elevated privileges. This minimizes autonomous action risk and aligns with the skill's claims.
Assessment
This skill is instruction-only and appears to do exactly what it says: exchange plain-text emails with book@bonbook.co to find/book/manage flights. Before installing, confirm you (or your human) actually want the agent to send/receive emails to that address and that the platform's email permissions are granted only when appropriate. Verify the publisher contact (support@bonbook.co) and the bonbook.co website yourself (use the access/signup link in SKILL.md) before entering any PII or payment data — the skill says payment/PII entry happens on the website and requires explicit human action. Because the skill relies on your agent's email permissions, avoid granting the agent broad inbox access unless necessary, and be alert for any inbound messages that request full PII or card numbers (the skill claims BonBook will not send such sensitive data via email).Like a lobster shell, security has layers — review code before you run it.
auto-bookingvk9705kg06zvhhpre0qcxws695h80wphwbook-flightvk974ykqzks3n169ht1rsangj95808qkxbookingvk974ykqzks3n169ht1rsangj95808qkxchange-flightvk974ykqzks3n169ht1rsangj95808qkxcheck-invk974ykqzks3n169ht1rsangj95808qkxflightvk974ykqzks3n169ht1rsangj95808qkxflight bookvk9705kg06zvhhpre0qcxws695h80wphwflight cancelvk9705kg06zvhhpre0qcxws695h80wphwflight changevk9705kg06zvhhpre0qcxws695h80wphwflight check-invk9705kg06zvhhpre0qcxws695h80wphwget-human-to-locationvk974ykqzks3n169ht1rsangj95808qkxlatestvk9749nt3vkkm3btm3dasfj65zn80yfbhmanage-travelvk974ykqzks3n169ht1rsangj95808qkxsearch-flightsvk974ykqzks3n169ht1rsangj95808qkxsecurevk9749nt3vkkm3btm3dasfj65zn80yfbhsecure releasevk971g0pttadednwyyc9xp75rv180x3h5security patchvk974vbrpxkv7vxwwdb14mhxfc580w5wptravelvk974ykqzks3n169ht1rsangj95808qkxtravel agentvk9705kg06zvhhpre0qcxws695h80wphwtravel assistantvk9705kg06zvhhpre0qcxws695h80wphwtravel-agentvk974ykqzks3n169ht1rsangj95808qkxverified publishervk9749nt3vkkm3btm3dasfj65zn80yfbh
License
MIT-0
Free to use, modify, and redistribute. No attribution required.