Gonza Navifare Deals

PassAudited by VirusTotal on May 11, 2026.

Overview

Type: OpenClaw Skill Name: gonza-navifare-deals Version: 1.2.2 The gonza-navifare-deals skill bundle is a flight price validation tool designed to work with a hosted Navifare MCP server (mcp.navifare.com). The instructions in SKILL.md and README.md are well-structured, focusing entirely on extracting flight itinerary data from user input or screenshots and providing comparison results. Notably, the skill includes explicit privacy instructions for the AI agent to exclude personally identifiable information (PII) such as passenger names and payment details during data extraction. No evidence of malicious intent, data exfiltration, or unauthorized execution was found.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Your flight route, dates, times, passenger count, and reference price may be shared with Navifare to perform the comparison.

Why it was flagged

This shows the skill sends user-provided travel itinerary information to a hosted MCP service. That is expected for price comparison and is disclosed, but users should know these trip details leave the local agent context.

Skill content
What is sent to the Navifare MCP server: - Flight numbers, airlines, airports, dates, and times - Travel class and passenger count ... - A reference price and currency for comparison
Recommendation

Use the skill only if you are comfortable sharing those trip details, and avoid uploading screenshots that contain names, booking references, passport details, or payment information.

What this means

It is less clear from the registry alone who maintains the skill and whether it is officially associated with the Navifare service.

Why it was flagged

The registry metadata does not identify an upstream source or homepage, which reduces provenance clarity for a skill that asks users to configure a hosted MCP service.

Skill content
Source: unknown; Homepage: none
Recommendation

Before configuring the MCP endpoint, verify that the Navifare service and publisher are trusted through documentation or other sources you rely on.