Aerobase Skill

• Risk level: Low
• Analyzed: Feb 24, 2026, 11:18 PM
• Findings: 0
• Version: 1.0.0

Overview

The skill's requests, instructions, and code align with its stated purpose (flight search and jetlag scoring); it only needs an Aerobase API key and calls aerobase.app APIs — nothing disproportionate or unrelated was found.

This skill appears to be what it claims: a client for the Aerobase API. Before installing, verify that you trust aerobase.app and where you obtained the skill (homepage and README point to the same domain). Keep your AEROBASE_API_KEY secret — it authorizes requests to the Aerobase service and will be sent with any flight/itinerary data you supply. If you're concerned about privacy, review Aerobase's privacy policy and avoid sending highly sensitive personal data (e.g., passport numbers) through the skill. If you prefer more control, run the included Python CLI locally (it uses requests) rather than allowing an agent to call the skill autonomously.