travel-blind-box

• Analyzed: Apr 1, 2026, 11:46 AM
• Findings: 1
• Version: 1.0.0
• Hash: 016de5f405e9509b367c9b6f715af67ad0e25106b8897aec17726bcb58e5e41f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The travel-blind-box skill bundle is a comprehensive travel planning tool that uses local Python scripts to manage travel history, allocate budgets, and generate itineraries. The code logic in scripts like `history_manager.py` and `budget_allocator.py` is transparent and aligns with the stated purpose of providing a 'blind box' travel experience. While `SKILL.md` contains a hardcoded output path (`/Users/haoxuan/...`), this appears to be a non-malicious development artifact. The skill relies on the external `flyai` tool for real-time data, and no evidence of data exfiltration, unauthorized execution, or malicious prompt injection was found.