Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Airbnb Host Operations
v1.0.0Full Airbnb/short-term rental operations for hosts managing 1-20 properties. Guest messaging automation, pricing optimization alerts, cleaning schedule coord...
⭐ 0· 22·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The name/description promise 'full Airbnb/short-term rental operations' including automated guest messaging and monitoring competitor rates, but the skill requests no API keys, credentials, or install steps to connect to Airbnb/VRBO/direct-booking platforms. That mismatch suggests it cannot truly perform automated platform actions (posting messages, updating rates) and is likely limited to generating drafts and recommendations.
Instruction Scope
SKILL.md is high-level and prescriptive about outputs (alerts, drafts, tracking) but does not specify where or how live data (current rates, bookings, local event calendars, occupancy/tax data) should be fetched. It asks users to provide property addresses and listing URLs, which are potentially sensitive, but does not state how that data is stored or transmitted. The guidance is vague enough that an agent could attempt web lookups or scraping unless explicitly constrained.
Install Mechanism
No install spec and no code files — minimal installation risk. Because it's instruction-only, nothing will be written to disk by the skill itself.
Credentials
The skill declares no required environment variables, credentials, or config paths. This is consistent with an advisory/drafting-only assistant, but inconsistent with true automation claims; if full automation is intended, missing credential requests are a red flag.
Persistence & Privilege
always is false and the skill does not request persistent system-level privileges. Autonomous model invocation is allowed by default but not by itself a red flag here.
What to consider before installing
This skill promises full, autonomous Airbnb/VRBO host operations but provides no way to connect to those platforms. Before installing, ask the publisher how the skill will: (1) access your listings and messages — does it require Airbnb/VRBO credentials or OAuth? (2) fetch live rates and occupancy — which data sources/APIs will be used? (3) store or transmit property addresses, listing URLs, vendor contact info, and financial reminders, and where (encrypted storage, third-party servers)? If the skill will perform actions on your behalf (send messages, change rates, file reminders), require explicit details about authentication, security, and data retention. If you only want drafting and advisory help, this instruction-only skill may be adequate, but do not provide credentials or sensitive tax/bank info unless you have clear assurances about how they will be used and stored. Additional information (code or an install spec showing legitimate API integrations) would raise confidence to benign.Like a lobster shell, security has layers — review code before you run it.
latestvk97cdaf7cmza1npacyvt76sev984y94h
License
MIT-0
Free to use, modify, and redistribute. No attribution required.