AI Travel Agent
v1.1.4Personal travel planning assistant. Requires a SerpAPI key (stored in ~/.serpapi_credentials). Searches real flights and hotels via Google (SerpAPI), checks...
⭐ 0· 126·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description (travel planning, flights/hotels/transport) match the requested capability: python3 runtime, SERPAPI_KEY, and scripts that call serpapi.com. Requested binaries and env var are proportional to the stated purpose.
Instruction Scope
SKILL.md and scripts only read the declared credential files or SERPAPI_KEY and call serpapi.com. Calendar access is optional and described as using separate calendar skills; the instructions explicitly limit file access to the two credential files.
Install Mechanism
No install spec (instruction-only with bundled scripts) — nothing is downloaded from third-party URLs or installed automatically. Scripts are plain Python and run locally.
Credentials
Only the SerpAPI API key (SERPAPI_KEY) is required. No unrelated credentials, secrets, or config paths are requested beyond the two credential file locations documented in SKILL.md.
Persistence & Privilege
Skill is not always-enabled and does not request elevated or persistent system-wide privileges. It does not modify other skills or system configuration in the provided files.
Assessment
This package appears coherent for a travel search assistant, but consider the following before installing:
- You must provide a SerpAPI key (SERPAPI_KEY). The key is sent to serpapi.com as part of API requests (expected) — do not share your key elsewhere.
- The skill's source/homepage is unknown. Although the code is readable and matches the description, if you prefer provenance you may want to verify the publisher or review the repository history before use.
- Calendar checks are optional: calendar access only occurs if you have and permit a separate calendar skill. Be mindful of which calendar skill you grant access to.
- SerpAPI usage is metered (free tier limits). Expect calls to count toward your quota; review usage on serpapi.com/manage-api-key.
- If you have any corporate or sensitive data on your machine, confirm the skill’s access is limited to the two credential files it declares; the scripts provided only read the declared files and environment variable.
If you’re comfortable providing a SerpAPI key and accept an unknown upstream origin, the skill's behavior looks consistent with its stated purpose.Like a lobster shell, security has layers — review code before you run it.
latestvk97aqscabxeyk3wm00gzre0xwn83kam8
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
✈️ Clawdis
Binspython3
EnvSERPAPI_KEY
Primary envSERPAPI_KEY
