GuruWalk Free Tours Search
v1.0.1Search GuruWalk free tours through the GuruWalk MCP server and return bookable options by city, dates, and language. Use this skill when the user asks for free tours, walking tours, guided city tours, plans in a city, or availability of tours on specific dates.
⭐ 1· 945·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name and description match the runtime instructions: the skill only describes calling a single 'search' tool on a GuruWalk MCP server and returning tour options by city, date, and language. No unrelated binaries, env vars, or installs are requested.
Instruction Scope
Instructions are narrowly scoped to normal search behavior (normalizing city slug, validating ISO dates, calling 'search', parsing JSON, filtering by availability/language/rating). However, the skill directs calls to an external MCP server URL (a run.app host) — the agent will send user-provided query parameters to that third-party endpoint, which is a privacy/availability consideration but not scope creep.
Install Mechanism
No install spec or code files; instruction-only skills have minimal disk/write risk. Nothing is downloaded or executed locally by the skill itself.
Credentials
The skill requires no environment variables or credentials, which is proportional to its stated function. No hidden env or config paths are referenced in SKILL.md.
Persistence & Privilege
always is false and the skill does not request persistent or elevated privileges, nor does it attempt to modify other skills or system-wide settings.
Assessment
This skill appears to do what it says: call a single search tool on a GuruWalk MCP server and return tours. Before installing or using it, consider: (1) the MCP endpoint is an externally hosted, undocumented URL (no homepage or owner details); queries and user-supplied location/dates will be sent there and could be logged — avoid sending sensitive data. (2) Test the skill with non-sensitive queries to confirm the returned JSON shape (content[0].text) and booking URLs are valid. (3) Have a fallback plan if the service is unavailable or returns null results (the SKILL.md notes some edge cases). If you need provenance for the endpoint, ask the publisher for the official API docs or a reputable host before relying on it for production use.Like a lobster shell, security has layers — review code before you run it.
latestvk970t4zv47nfz2hz42wx01m6yh80tq4c
License
MIT-0
Free to use, modify, and redistribute. No attribution required.