Parking Finder

PassAudited by ClawScan on May 13, 2026.

Overview

The skill appears to be a straightforward parking lookup helper that sends user-provided location queries to Camino AI using a Camino API key.

This skill looks safe for its stated purpose, but only install it from a source you trust, provide a Camino API key you are comfortable using, and remember that your parking searches and coordinates will be sent to Camino AI.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI03: Identity and Privilege Abuse

What this means

Anyone using the skill must provide a Camino API key, which may authorize requests against their Camino account or quota.

Why it was flagged

The skill uses a Camino API key as a service credential. This is expected for the stated Camino API integration, and no credential logging or unrelated transmission is shown.

Skill content

-H "X-API-Key: $CAMINO_API_KEY"

Recommendation

Use a Camino key with appropriate limits, avoid sharing it, and remove it from Claude/OpenClaw settings if you stop using the skill.

Note

ASI07: Insecure Inter-Agent Communication

What this means

Destinations, coordinates, and parking searches may be visible to Camino as part of the API request.

Why it was flagged

The script sends the user's parking query and any coordinates/radius/limit parameters to Camino's external API over HTTPS. This is purpose-aligned, but location searches can be sensitive.

Skill content

"https://api.getcamino.ai/query?${QUERY_STRING}" | jq .

Recommendation

Avoid sending sensitive destinations unless you are comfortable sharing them with Camino AI.

Note

ASI04: Agentic Supply Chain Vulnerabilities

What this means

If a user follows the bulk or unpinned install instructions, they may install more code or skills than just this parking helper.

Why it was flagged

The documentation includes user-run install commands from a GitHub repository and also recommends installing a broader companion skill suite. This is disclosed and not automatic, but it expands what a user may install.

Skill content

npx skills add https://github.com/barneyjm/camino-skills

Recommendation

Install only the specific skill you intend to use and verify the repository/source before running npx-based install commands.