Aerobase Concierge
PassAudited by ClawScan on May 1, 2026.
Overview
This travel concierge is purpose-aligned, but it uses an Aerobase API key, can make proactive API calls, and tracks travel preferences during the conversation.
Install if you are comfortable giving the agent an Aerobase API key and sharing travel preferences or itinerary details with Aerobase. Keep the key scoped and private, watch API quota usage, and require confirmation before any real booking, purchase, cancellation, or other account-changing step.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may consume API quota or surface recommendations based on inferred travel context before you explicitly ask for that specific action.
This directs proactive tool/API use rather than only user-requested actions. It matches the advertised autonomous concierge purpose, but users should notice the agent may initiate scoring, monitoring, or deal checks on its own.
You have all 10 Aerobase API tools and autonomous behaviors that activate without being asked.
Use it when you want proactive travel assistance, and require explicit confirmation before any real-world booking, purchase, cancellation, or account-changing action.
Anyone or anything with the key could potentially use the associated Aerobase API access and quota.
The skill expects an Aerobase API credential. That is purpose-aligned for an Aerobase integration, but it is still a credential that can authorize API calls.
export AEROBASE_API_KEY="ak_..."
Use a scoped or revocable key if available, keep it out of chat logs and shared files, and rotate it if you suspect exposure.
Travel-related information you provide or that the agent infers may be sent to Aerobase for scoring, deals, or recovery planning.
The skill discloses that requests go to an external Aerobase service. For a travel concierge this is expected, but travel searches, itineraries, or preference data may be included in those requests.
All requests use `https://aerobase.app/api` as the base URL.
Confirm you trust Aerobase with your travel details and avoid sharing passport numbers, payment details, or other unnecessary sensitive information.
The agent may reuse inferred travel preferences, loyalty details, upcoming trip information, or chronotype when making future suggestions in the same conversation.
The skill intentionally maintains personal travel context in the conversation. This is useful for its purpose, but incorrect or sensitive context could affect later recommendations.
Remember their home airport, preferred cabin, loyalty programs, and chronotype across the conversation.
Review and correct remembered details, and clear the conversation context if you do not want prior travel information reused.