Google Flights
v2.0.0Search Google Flights for prices, availability, and deals. Use when user asks about flight prices, searching for flights, comparing airfares, finding the che...
⭐ 2· 1.2k·7 current·7 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the code and instructions: scripts build Google Flights URLs, use a 'fast_flights' scraper library, provide search, tracking, and route-watch features, and persist tracking data under ~/clawd/memory. There are no unrelated privileges requested (no cloud creds, no SSH keys, etc.).
Instruction Scope
Runtime instructions are limited to activating a venv, running the included scripts, creating a config.json, and optionally adding a cron job. The scripts read/write only the skill's config and the memory files under ~/clawd/memory. Minor inconsistencies: load_preferences docstring mentions 'TOOLS.md' but actually loads config.json; SKILL.md uses an unfamiliar 'uv' command in the setup steps (likely a typo), which should be corrected to the intended venv/pip commands.
Install Mechanism
There is no formal install spec in the registry, but SKILL.md recommends installing the external package 'fast-flights' via pip. Relying on an external PyPI scraper package is a moderate risk (supply-chain/trust) but is proportionate to the stated purpose; there are no downloads from untrusted URLs or extract steps in the bundle itself.
Credentials
The skill declares no required environment variables or credentials. The optional config can contain loyalty program identifiers, but those are local config values (not required env secrets). The scripts don't attempt to read unrelated system config or secrets.
Persistence & Privilege
The skill persists state to files under ~/clawd/memory and a config.json in the skill directory, which is consistent with a tracker/watch tool. The skill is not always-enabled and does not modify other skills or global agent configs.
Assessment
This skill appears to do what it says: search Google Flights (via an external 'fast-flights' scraper), store tracking state under ~/clawd/memory, and produce alerts. Before installing: 1) Inspect and vet the 'fast-flights' package on PyPI (supply-chain risk — it will be executed by these scripts). 2) Correct the SKILL.md setup commands if needed (the 'uv' command looks like a typo) and run setup inside an isolated virtualenv. 3) Be aware that scraping Google Flights may violate Google's terms of service and could be rate-limited; consider frequency of automated cron checks. 4) The skill stores optional loyalty IDs or similar in config.json — do not put sensitive secrets there unless you trust the code. 5) If you want extra safety, run the scripts in an isolated environment or review the imported package source before use.Like a lobster shell, security has layers — review code before you run it.
latestvk97ccecfbf7w3qemda57mf6b7x82yh8n
License
MIT-0
Free to use, modify, and redistribute. No attribution required.