flight-scout
v0.1.1调用远程 Flight Scout 商用 API 的 skill。用于用户提供 API base URL 和 API key 后,执行航班搜索、价格日历、同步甩尾查询、异步甩尾任务查询,并返回结构化 JSON 结果。
⭐ 0· 112·0 current·0 all-time
byLinden@ebolaboy
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (flight API client) match the declared requirements: python3 plus FLIGHT_SCOUT_API_BASE_URL and FLIGHT_SCOUT_API_KEY. The included script constructs requests to the provided base URL and uses the API key in X-API-Key header—expected for this purpose. No unrelated credentials or binaries are requested.
Instruction Scope
SKILL.md instructs the agent to read a local .env (if present) and environment variables, then call the documented endpoints and return raw JSON. The instructions do not ask the agent to read unrelated system files or transmit data to endpoints other than the configured FLIGHT_SCOUT_API_BASE_URL.
Install Mechanism
No install spec — instruction-only with a bundled Python script. Nothing is downloaded or written by an installer. This is low-risk and appropriate for a small API wrapper.
Credentials
Only two required env vars (base URL and API key) plus an optional timeout are requested; these are proportional to an HTTP API client. Note: the skill will send the provided API key to whatever base URL is configured, so the user should ensure the base URL is trustworthy.
Persistence & Privilege
The skill does not request always:true and does not modify other skills or system-wide config. It only reads a local .env in its own directory and environment variables; this is normal for a skill of this type.
Assessment
This skill appears to be a straightforward client for a Flight Scout API. Before installing: 1) Verify the FLIGHT_SCOUT_API_BASE_URL is the official/trusted endpoint you expect (the skill will send your API key there). 2) Do not store unrelated secrets in the skill's .env (the script will read it). 3) Review the GitHub homepage/repo (provided) if you want source provenance. If you plan to let the agent invoke the skill autonomously, remember it can make network calls using the configured base URL and API key.Like a lobster shell, security has layers — review code before you run it.
latestvk97dhsr6837fqkr2995w2m5he584hsxa
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binspython3
EnvFLIGHT_SCOUT_API_BASE_URL, FLIGHT_SCOUT_API_KEY
Primary envFLIGHT_SCOUT_API_KEY
