Airbnb Search
v0.1.4Search Airbnb listings with prices, ratings, and direct links. No user API key required (uses Airbnb's public frontend API key). Use when searching for Airbnb stays, vacation rentals, or accommodation pricing.
⭐ 1· 1.7k·3 current·3 all-time
byAaron Levin@awlevin
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (Airbnb Search) align with the code and runtime instructions. The package makes direct HTTP calls to Airbnb's ExploreSearch endpoint and returns prices, ratings, and links — exactly what the skill says. The hardcoded API key matches the claim that no user key is required.
Instruction Scope
SKILL.md and scripts instruct the agent to run the included CLI script which calls Airbnb's GraphQL endpoint. The instructions only reference the dependencies needed (requests) and the repo's scripts; they do not ask for unrelated files, system credentials, or to send data to third parties beyond airbnb.com. The repo contains integration tests that make live API calls — these may run network requests if executed.
Install Mechanism
No install spec is present (instruction-only for runtime), and there are no remote downloads or extract steps. The code files are included in the skill package (CLI and search implementation); dependency is just the requests library declared in pyproject. This is proportionate to the functionality.
Credentials
The skill requires no environment variables, no credentials, and no config paths. The single API key is hardcoded in code (a public frontend key) which matches the documentation's 'no user API key' claim. No unrelated secrets are requested.
Persistence & Privilege
Skill does not request persistent/system privileges (always:false). It does not modify other skills or system configs. Autonomous invocation is allowed (platform default) but not combined with other concerning flags.
Assessment
This skill appears internally consistent with its stated purpose, but consider the following before installing:
- The code calls Airbnb's internal GraphQL endpoint using a hardcoded frontend API key. That key is public in the browser but may stop working if Airbnb rotates it or changes the API.
- Using an unofficial/internal API may violate Airbnb's terms of service; be mindful of legal/ToS risks and rate limits.
- The repository includes integration tests that perform live API calls — running the tests will make network requests to Airbnb and could trigger rate limits.
- There are minor repo metadata inconsistencies (multiple version strings: registry 0.1.4, pyproject 0.1.3, package __version__ 0.1.0; and slight GitHub/owner name variants). These look like sloppy maintenance rather than malicious intent, but you may want to verify the upstream source (GitHub link) and the package owner before trusting it in production.
- The skill exposes listing lat/lng in results (as returned by Airbnb). If you need to avoid precise location data, review parse_listings output or filter coordinates.
If you proceed: review the code yourself (it’s small and readable), run it in a sandboxed environment if possible, and avoid running the integration tests unless you intend to make live API requests.Like a lobster shell, security has layers — review code before you run it.
latestvk97fgd6xa695ne6kjpq6w5yp89811yah
License
MIT-0
Free to use, modify, and redistribute. No attribution required.