Hotel Finder
PassAudited by ClawScan on May 13, 2026.
Overview
This skill appears to do what it says: it sends user-provided hotel search requests to Camino AI using a Camino API key, with no evidence of hidden execution, persistence, or unrelated data access.
This looks safe for its stated purpose if you trust Camino AI with your hotel and location searches. Use a scoped or dedicated API key, install only the specific skill you need, and do not enter sensitive private travel details unless you are comfortable sending them to the Camino API.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing and using the skill gives it access to use your Camino API key and consume your Camino quota for hotel searches.
The script requires a Camino API key and uses it as the authentication header for Camino's API.
if [ -z "$CAMINO_API_KEY" ]; then ... -H "X-API-Key: $CAMINO_API_KEY"
Use a dedicated Camino API key if possible, avoid sharing logs that may contain environment details, and revoke or rotate the key if you stop using the skill.
Hotel searches may reveal travel plans, locations, neighborhoods, or event venues to the external Camino service.
The user’s search query and optional latitude/longitude/radius parameters are sent to Camino AI’s external API.
"https://api.getcamino.ai/query?${QUERY_STRING}"Avoid submitting sensitive personal addresses or confidential travel plans unless you are comfortable sharing them with Camino AI.
Installing the full suite would expand the amount of third-party skill code and behavior available to your agent.
The documentation suggests an optional install-all command from a GitHub repository, which would add more skills than this hotel finder.
Install all skills from repo npx skills add https://github.com/barneyjm/camino-skills
Install only the specific Camino skill you need unless you have reviewed and trust the full skill suite.