Expedia

This skill appears coherent with its stated Expedia-focused purpose, but before enabling it: 1) review and control the ~/expedia/ directory the skill will create (inspect contents after first run); 2) never paste or store raw API secrets, payment data, or full auth headers into those files — the docs also warn this, but verify behavior; 3) only switch to Travel Redirect or Rapid modes if you have valid Expedia partner credentials and you understand where those creds will live (prefer secure secret storage, not plain files); 4) note the skill uses openssl/xxd to build signatures — avoid logging command outputs that might include secret values; 5) because the skill's source is listed as unknown, consider running it in a limited or test environment first and monitor what files it writes. If you need higher assurance, ask the publisher for an explicit provenance or signed source before using partner/booking workflows.