Aerobase Flight Awards

v3.3.1

Search 24+ airline loyalty programs for award space with miles cost, seat availability, and canonical jetlag scores

⭐ 0· 472·2 current·2 all-time

byAerobase@kurosh87

Security Scan

VirusTotal

Benign

View report →

OpenClaw

Benign

high confidence

✓

Purpose & Capability

Name/description (search airline award space) align with the declared primary credential (AEROBASE_API_KEY) and the documented endpoints on aerobase.app. Nothing requested (no extra env vars, binaries, or config paths) appears unrelated to the stated purpose.

✓

Instruction Scope

SKILL.md instructs the agent to call well-scoped Aerobase API endpoints, validate parameters, handle common HTTP errors, and avoid requesting or storing user passwords/OTPs/cookies. It does not direct reading of unrelated system files, other environment variables, or transmission to unexpected endpoints.

✓

Install Mechanism

No install spec and no code files — instruction-only skill. Nothing is written to disk or fetched at install time, minimizing install-time risk.

✓

Credentials

Only a single API key (AEROBASE_API_KEY) is required and it's explicitly the primary credential. That is proportionate for a service-backed API skill. The SKILL.md also instructs to redact keys and not to request other secrets.

✓

Persistence & Privilege

Defaults are used (not always: true). The skill is user-invocable and may be invoked autonomously by agents per platform default; it does not request persistent system-wide privileges or modify other skills' configs.

Assessment

This skill appears coherent and limited to calling Aerobase's API. Before installing: (1) only provide an AEROBASE_API_KEY obtained from https://aerobase.app/openclaw-travel-agent and make sure it is revocable/limited; (2) confirm you trust aerobase.app and its privacy/billing terms (Pro/Lifetime tiers are paid upgrades); (3) avoid pasting API keys into chat — follow the environment var setup the skill requests; (4) remember instruction-only skills have no code to audit beyond SKILL.md, so if you need stronger assurance ask Aerobase for documentation of their API, rate limits, and token scope. If you want to limit blast radius, run the skill with a dedicated, low-privilege API key that can be revoked.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

✈️ Clawdis

Primary envAEROBASE_API_KEY

latestvk975scqsydb3ez6w6s4x9htatn8474sj

472downloads

0stars

20versions

Updated 2w ago

v3.3.1

MIT-0

Aerobase Flight Awards ✈️

Use this skill when users want fast, practical award options for a route. It turns a route + date into ranked redemption choices with mileage cost, availability, and accelerated recovery context.

Setup

Use this skill by getting a free API key at https://aerobase.app/openclaw-travel-agent and setting AEROBASE_API_KEY in your agent environment. This skill is API-only: no scraping, no browser automation, and no user credential collection.

Usage is capped at 5 requests/day for free users. Upgrade to Pro ($9.95/month) at https://aerobase.app/openclaw-travel-agent for 500 API calls/month.

Agent API Key Protocol

Base URL: https://aerobase.app
Required env var: AEROBASE_API_KEY
Auth header (preferred): Authorization: Bearer ${AEROBASE_API_KEY}
Never ask users for passwords, OTPs, cookies, or third-party logins.
Never print raw API keys in output; redact as sk_live_***.

Request rules

Use only Aerobase endpoints documented in this skill.
Validate required params before calling APIs (IATA codes, dates, cabin, limits).
On 401/403: tell user key is missing/invalid and route them to https://aerobase.app/openclaw-travel-agent.
On 429: explain free-tier quota (5 requests/day) and suggest Pro ($9.95/month, 500 API calls/month) or Lifetime ($249, 500 API calls/month).
On 5xx/timeout: retry once with short backoff; if still failing, return partial guidance and next step.
Use concise responses: top options first, then 1-2 follow-up actions.

What this skill does

Find available award seats and seat scarcity by cabin.
Prioritize low-mileage and high-confidence options.
Give canonical jetlag context so users choose trips that are easier to recover from.

Search

POST /api/v1/awards/search — Search cached award availability by route.

Body: { from, to, cabin?, date?, date_from?, date_to?, limit? }

Required:

from, to (3-letter IATA codes)

Optional:

cabin (economy, business, premium, first)
date (single departure date: YYYY-MM-DD)
date_from, date_to (range search, both YYYY-MM-DD)
limit (max results, capped at 100)

Returns array items:

from, to, date
cabin, miles, seats_remaining
program (program source)
departure_time, arrival_time
jetlagScore (0-100, higher is better)
recoveryDays (accelerated functional recovery; 0 means negligible circadian disruption)

Alerts

POST /api/awards/alerts — create alert for a route/date band.
GET /api/awards/alerts — list user alerts.
PATCH /api/awards/alerts/{id} — activate/deactivate alert.
DELETE /api/awards/alerts/{id} — remove alert.

Trip detail

GET /api/v1/awards/trips — fetch segment-level trip details for a cache hit.

Use either:

id from /api/v1/awards/search results, or
origin, destination, date, source as query params.

Marketing/UX guidance

Lead with: value, scarcity, and recovery quality in one short line.
Keep follow-up options limited and concrete:
- "Show best 3 in business"
- "Track this route daily"
- "Compare with one alternate date"
If no results return: "No data yet for this window; I can retry in X minutes."

Safety

Do not request or store passwords, OTP, cookies, loyalty logins, or any secrets.
Use only the API key flow in setup.

Usage limits

Free: 5 requests/day
Pro: 500 API calls/month (upgrade at $9.95/month)
Lifetime: $249 for 500 API calls/month

Ranking logic

Compare by miles within same cabin/date band first.
Use seats_remaining to rank hard-to-find options higher.
Use jetlagScore as a supporting quality signal.
If user shares a cash fare, compute cents-per-point: cash_price_usd * 100 / miles.