Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward Aerobase travel API guide for jetlag-aware flight search, with disclosed external API calls and no hidden persistence or local system changes.
Before installing, confirm you trust Aerobase and are comfortable sending flight routes, dates, times, and search preferences to its API. Treat AEROBASE_API_KEY as a secret and avoid sharing terminal logs or command snippets that include it.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
When the user describes a specific flight with departure and arrival times, score it for jetlag impact.
curl -s -X POST "https://aerobase.app/api/v1/flights/score" \
-H "Authorization: Bearer $AEROBASE_API_KEY" \
-H "Content-Type: application/json" \
-d '{
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Search for flights on a route and date, ranked by jetlag score.
curl -s -X POST "https://aerobase.app/api/v1/flights/search" \
-H "Authorization: Bearer $AEROBASE_API_KEY" \
-H "Content-Type: application/json" \
-d '{
This markdown file instructs the user to export an API key as an environment variable, which involves sensitive credentials. The document provides no accompanying warning about keeping the key secret, avoiding shell history leakage, or not sharing logs/commands containing the token.
No suspicious patterns detected.