Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Lap Airport On Time Performance

v1.0.0

Airport On-Time Performance API skill. Use when working with Airport On-Time Performance for airport. Covers 1 endpoint.

0· 44·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for mickmicksh/lap-airport-on-time-performance.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Lap Airport On Time Performance" (mickmicksh/lap-airport-on-time-performance) from ClawHub.
Skill page: https://clawhub.ai/mickmicksh/lap-airport-on-time-performance
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install lap-airport-on-time-performance

ClawHub CLI

Package manager switcher

npx clawhub@latest install lap-airport-on-time-performance
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The declared purpose (fetch airport on-time predictions) matches the single endpoint described. However the base URL is an Amadeus test domain while the SKILL.md states 'No authentication required' — many Amadeus endpoints normally require credentials, so this claim may be inaccurate or reflect a special public test endpoint.
!
Instruction Scope
The instructions repeatedly reference references/api-spec.lap for schemas and mapping, but that file is not present in the skill manifest. The SKILL.md also includes CLI examples using npx @lap-platform/lapsh (which requires Node/npm and network access) but the skill declares no required binaries; an agent following these instructions may fail or behave unexpectedly if those local files or tooling are absent. The instructions do not request unrelated system files or credentials.
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so nothing is written to disk by an install step — low install risk.
Credentials
The skill requests no environment variables or credentials, which is proportionate to the provided instructions if the endpoint truly needs no auth. If the real API requires keys, the lack of declared credentials is an omission to be corrected.
Persistence & Privilege
No elevated persistence or always-enabled flag is set. Default autonomous invocation is allowed (platform default) and there is no evidence the skill modifies other skills or system settings.
What to consider before installing
This skill is low-friction (instruction-only) but contains inconsistencies you should confirm before installing: 1) The SKILL.md references a local file references/api-spec.lap that is not included — ask the publisher to provide the spec or embed the needed schema. 2) Verify whether the Amadeus test endpoint actually requires authentication; if it does, the skill should declare which API key/secret it needs. 3) The CLI examples use npx (Node/npm); if you expect the agent to run those commands, ensure the runtime has Node available. If you cannot get answers from the publisher, treat the skill as incomplete and avoid granting it autonomous network access until the missing pieces are resolved.

Like a lobster shell, security has layers — review code before you run it.

latestvk973sz0cfc359eqz6n8q88jbe185met3
44downloads
0stars
1versions
Updated 1d ago
v1.0.0
MIT-0

Airport On-Time Performance

API version: 1.0.4

Auth

No authentication required.

Base URL

https://test.api.amadeus.com/v1

Setup

  1. No auth setup needed
  2. GET /airport/predictions/on-time -- verify access

Endpoints

1 endpoints across 1 groups. See references/api-spec.lap for full details.

airport

MethodPathDescription
GET/airport/predictions/on-timeReturns a percentage of on-time flight departures from a given airport.

Common Questions

Match user requests to endpoints in references/api-spec.lap. Key patterns:

  • "List all on-time?" -> GET /airport/predictions/on-time

Response Tips

  • Check response schemas in references/api-spec.lap for field details

CLI

# Update this spec to the latest version
npx @lap-platform/lapsh get airport-on-time-performance -o references/api-spec.lap

# Search for related APIs
npx @lap-platform/lapsh search airport-on-time-performance

References

  • Full spec: See references/api-spec.lap for complete endpoint details, parameter tables, and response schemas

Generated from the official API spec by LAP

Comments

Loading comments...