travel-planner-plus

This skill appears to be a legitimate travel guide generator, but there are several mismatches you should resolve before installing: 1) SKILL.md and the included Python script require a Baidu Maps API key (AK) and the python-docx package, yet the registry metadata declares no required env vars or install steps — ask the author to declare a BAIDU_AK (or equivalent) and provide installation instructions for python-docx. 2) The instructions tell the agent to check MEMORY.md/TOOLS.md for an AK — avoid automatic scanning of agent memory; prefer the user to explicitly provide the AK at runtime to prevent accidental exposure of other stored secrets. 3) The script prints a prefix of the AK to stdout which may leak part of the key in logs; request removal of that logging or masking of the key. 4) Confirm how the Feishu 'message' tool is authenticated and whether any Feishu credentials are required — these are not declared. 5) Because the source/homepage is unknown, run this in an isolated/test environment first and review the code (the included script) to ensure no additional network endpoints or behaviors are added. If you cannot get the author to clarify these points, treat the skill as risky and avoid granting it access to stored credentials or sensitive memory.