Amadeus Hotels
v1.0.2Search hotel prices and availability via Amadeus API. Find vacation hotels by city, coordinates, or amenities. Compare prices, view ratings, get offer details. Track prices with alerts. Use when user asks to "find hotels", "search hotels in [city]", "hotel prices", "vacation accommodation", "hotel deals", "track hotel price".
⭐ 1· 2.2k·2 current·2 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (hotel search, offers, details, tracking) matches the included scripts and declared requirements. Requested binaries (python3), pip dependency (requests), and environment variables (AMADEUS_API_KEY, AMADEUS_API_SECRET) are appropriate for calling Amadeus APIs.
Instruction Scope
Runtime instructions (SKILL.md) and scripts are narrowly scoped to calling the Amadeus test/production endpoints and formatting results. One minor mismatch: SKILL.md instructs setting AMADEUS_ENV (test/production) and the code reads AMADEUS_ENV, but AMADEUS_ENV is not listed in the declared requires.env. The scripts also create/read local state files under the skill's state/ directory (token cache and tracked.json) — this is expected for token caching and price-tracking but worth noting.
Install Mechanism
Install uses pip to install the single dependency 'requests' (declared in metadata). No downloads from unknown URLs, no archive extraction, and no complex multi-step installers — low-risk, proportionate to the task.
Credentials
Only Amadeus credentials (AMADEUS_API_KEY and AMADEUS_API_SECRET) are required as primary secrets; these are the exact credentials needed for OAuth with Amadeus. No unrelated credentials or broad secrets are requested. (AMADEUS_ENV is used but optional.)
Persistence & Privilege
The skill does not request 'always: true' and does not modify other skills or global agent settings. It writes token and tracking state to its own 'state' directory under the skill root (token.json, tracked.json), which is reasonable for caching and tracking functionality — users should be aware these files are stored on disk.
Assessment
This skill appears to do what it says: call the Amadeus API to search hotels, fetch offers/details, and track prices. Before installing, consider: 1) Only provide AMADEUS_API_KEY and AMADEUS_API_SECRET from an account you control; test keys are fine for development. 2) The skill caches OAuth tokens and stores tracked items in files under the skill's state/ directory (token.json and tracked.json) — review and secure that directory if you run on a shared host. 3) SKILL.md mentions AMADEUS_ENV (test/production) but that variable is not listed in the declared requirements — set it appropriately to avoid accidentally using production credentials. 4) If you plan to run the tracker on cron, be mindful of API rate limits and your Amadeus plan (test vs production). If you want additional assurance, verify the upstream GitHub repo and owner before providing production credentials.Like a lobster shell, security has layers — review code before you run it.
latestvk97007nht02q6p9zfmpct8e21580cksr
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🏨 Clawdis
Binspython3
EnvAMADEUS_API_KEY, AMADEUS_API_SECRET
Primary envAMADEUS_API_KEY