Airbnb Str Listing Optimizer
AdvisoryAudited by Static analysis on May 12, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If real lockbox, smart-lock, or Wi-Fi credentials are pasted into an AI prompt or copied into the wrong template, they could be exposed beyond the intended guest audience.
The prompt asks users to provide property access instructions and Wi-Fi credentials so they can be placed into guest communication templates. This is aligned with the guest-message purpose, but these are sensitive operational details.
**Access code or instructions:** [e.g., lockbox code is 4821 ...] ... **WiFi password:** [password]
Use placeholders while drafting, use temporary or rotating guest codes, and only insert live access details in guest-only messages shortly before arrival.
Sensitive property details may be processed or retained according to the AI provider's policies, even though the skill itself contains no exfiltration code.
The skill directs users to send filled-in property details to an external AI provider. Since other prompt files request Wi-Fi passwords, host contact details, and access instructions, users should treat that provider boundary carefully.
paste it into Claude (or any AI), fill in your property details
Prefer placeholders for passwords and access codes, avoid sharing live credentials with general-purpose AI tools, and use provider settings that limit training or retention when available.
Incorrect triggers, stale codes, or unreviewed templates could send wrong or overly sensitive information to guests.
The skill encourages scheduled guest-message automation. This is expected for the stated purpose, but the messages may contain operational details such as access codes, parking, and Wi-Fi information.
All 6 can be fully automated — set the trigger and forget.
Review every scheduled message before enabling it, use platform merge fields where possible, and verify triggers only send access information to confirmed guests at the intended time.