Search and Book Flights
v2.4.1Find, book, and change flights for your human via email. One message, and done. (by BonBook)
⭐ 3· 2.2k·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill name/description (search, book, change flights via email) aligns with the runtime instructions: it operates by sending to and reading from book@bonbook.co and optionally completing web forms. There are no unrelated credentials, binaries, or installs requested.
Instruction Scope
SKILL.md confines actions to email exchanges with book@bonbook.co and optional web form interactions (with explicit human approval). It does not instruct the agent to read arbitrary local files, other env vars, or exfiltrate data. The skill does note optional abilities (web browsing, calendar-read, form-completion) which require explicit consent.
Install Mechanism
Instruction-only skill with no install spec and no code files — lowest install risk. Nothing is downloaded or written to disk by the skill itself.
Credentials
No environment variables or API keys are requested, which is appropriate. The skill does require the agent to have email send/receive permissions (declared as a prerequisite) and optionally calendar/web access for added features — these capabilities are necessary for the described flow, but granting them gives the agent access to your mailbox and potentially PII on the web forms, so they should be granted only with caution and explicit human approval.
Persistence & Privilege
Skill declares no persistence, no elevated privileges, disable-model-invocation:true and require-explicit:true are set (prevents autonomous invocation and requires human approval). always is false. These reduce autonomous risk and are coherent with the stated privacy model.
Assessment
Before installing: (1) confirm BonBook's identity (visit https://bonbook.co and optionally email support@bonbook.co to verify). (2) Understand that the agent must be able to send and read email on your behalf — only grant that permission if you trust the agent and are comfortable with it accessing booking-related emails. (3) Do not allow automated form-completion or calendar access without explicit, per-action approval; PII and payment entry should happen directly on the merchant site under your control. (4) Review BonBook's privacy and payment handling (PCI/3DS) and retention policies on their site. (5) Because this is instruction-only and relies on an external backend, treat BonBook as a third-party service — do not assume the skill stores or protects your data for you; verify independently. If any step in the SKILL.md seems to request broader access (unrelated files, credentials, or automatic form submission without explicit confirmation), decline and investigate further.Like a lobster shell, security has layers — review code before you run it.
book-flightvk974s4sje3nzbv4grxh0hmwgz180b9n0cancel-flightvk974s4sje3nzbv4grxh0hmwgz180b9n0change-flightvk974s4sje3nzbv4grxh0hmwgz180b9n0flightsvk974s4sje3nzbv4grxh0hmwgz180b9n0latestvk97ezr4g32k3wxaz1v31p3k78s80y834securevk97ezr4g32k3wxaz1v31p3k78s80y834travelvk974s4sje3nzbv4grxh0hmwgz180b9n0verified publishervk97ezr4g32k3wxaz1v31p3k78s80y834
License
MIT-0
Free to use, modify, and redistribute. No attribution required.