Hotel Finder
Security checks across static analysis, malware telemetry, and agentic risk
Overview
The skill's requests and instructions match its stated purpose (hotel searches via Camino AI) and it only asks for a single API key; nothing in the files indicates unrelated or excessive access.
This skill appears coherent for searching hotels via Camino AI. Before installing or running anything: (1) verify the GitHub repo (https://github.com/barneyjm/camino-skills) if you plan to use the npx/clawhub installer, since those commands fetch remote code; (2) prefer using a temporary/trial API key for initial testing; (3) avoid pasting long-lived or high-privilege credentials into example commands or public shells — store CAMINO_API_KEY in your agent's settings or a secure secret store; (4) confirm you are comfortable with the Camino service (api.getcamino.ai) since the skill sends search queries and your key to that endpoint; (5) ensure jq and curl are installed and inspect scripts locally before execution. Overall the package is consistent with its stated purpose.
Static analysis
Static analysis findings are pending for this release.
VirusTotal
No VirusTotal findings
Risk analysis
No visible risk-analysis findings were reported for this release.