Search and Book Flights
ReviewAudited by ClawScan on May 1, 2026.
Overview
The skill is coherent for flight booking, but users should notice that it relies on delegated email access and a third-party travel service that handles bookings and sensitive travel/payment information.
This appears to be a coherent instruction-only travel-booking skill, not a hidden code package. Before installing or using it, make sure you are comfortable letting your agent send and read BonBook-related email, and require clear human confirmation before any purchase, change, cancellation, calendar sync, or form submission involving personal or payment information.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent could help initiate purchases, changes, or cancellations that may cost money or affect travel plans.
The core workflow can cause real bookings or travel changes through an email channel. This is purpose-aligned and disclosed, but users should treat it as high-impact and approve each action deliberately.
Find, book, and change flights for your human via email. One message, and done.
Only use this after confirming trip details, prices, cancellation/change terms, and that the human has explicitly approved the action.
Email access lets the agent communicate as the user with the travel service and read booking-related replies.
The skill relies on delegated email authority. That is expected for an email-based booking service and is scoped to BonBook messages, but sending email as the user is still a sensitive permission.
REQUIRED: Agent must be able to send email on behalf of the human (to book@bonbook.co) ... receive/read email responses from book@bonbook.co
Grant email access only to agents you trust, and ensure the agent is instructed to use it only for BonBook booking messages approved by the human.
BonBook may retain sensitive travel profile and booking information outside the local agent environment.
The artifact discloses persistent backend storage of travel-related information. That is normal for a travel service, but traveler documents, preferences, and booking records are sensitive.
remembers all traveler documents + preferences ... Booking data stored securely until flights have concluded or booking is cancelled
Review BonBook’s privacy, retention, and account-deletion policies before sharing identity documents, payment details, or detailed travel preferences.