travai
v1.0.0Search flights and stays, then create card or crypto payments via TravAI. Use when the user asks about flights, travel planning, booking trips, finding accom...
⭐ 0· 69·0 current·0 all-time
bykirikiri@kirikov
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (searching flights/stays and creating payments) align with the SKILL.md content: it documents searches, offers, bookings, and payments against https://api.travai.tech. There are no unrelated environment variables, binaries, or install steps requested.
Instruction Scope
The instructions are limited to calling the TravAI REST API (sign-in/sign-up, searches, offers, bookings, payments) and error-handling rules. They do not instruct reading local files, system state, or other credentials unrelated to TravAI. They do instruct the agent to prompt for/access an access_token (user-provided) which is appropriate for API calls.
Install Mechanism
No install spec and no code files — this is instruction-only, meaning nothing is written to disk or installed by the skill.
Credentials
The skill declares no required env vars, no config paths, and no primary credential. The runtime instructions rely on a user-supplied access_token or explicit sign-in/sign-up, which is proportionate to a travel booking integration.
Persistence & Privilege
always is false and the skill does not request persistent system privileges or modifications to other skills. Default autonomous invocation remains enabled (platform default) but is not combined with other concerning privileges here.
Assessment
This skill appears coherent and limited to the TravAI API. Before installing: (1) confirm the domain (api.travai.tech) and that you trust TravAI before pasting an access token or credentials; prefer pasting an existing access_token over entering username/password when possible; (2) be cautious when making payments — verify crypto addresses, exact amounts, and refund wallet details shown to you before approving; (3) because the skill can be invoked by the agent, consider whether you want it available to run autonomously in your agent settings. If you need higher assurance, ask the publisher for a homepage or source link and confirm the API behavior against TravAI's official docs.Like a lobster shell, security has layers — review code before you run it.
latestvk979t5wr9b7swtnjs3fx515c1s83jhxd
License
MIT-0
Free to use, modify, and redistribute. No attribution required.