v1.0.0

Travel Information and News

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 7:05 AM.

Analysis

The skill is a coherent travel-search tool, but it relies on external search providers, API keys, optional browser automation, and user-installed dependencies that users should review before use.

GuidanceThis looks like a normal travel-search aggregation skill. Before installing, check that you are comfortable providing Tavily/Brave API keys, sending queries to external search providers, and optionally installing browser automation components. Use the browser-scraping mode only when needed, and prefer a contained environment for Chromium/Puppeteer.

Findings (5)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Tool Misuse and Exploitation

SeverityMediumConfidenceHighStatusNote

scripts/browser_search.js

puppeteer.launch({
    headless: true,
    executablePath: "/usr/bin/chromium",
    args: ["--no-sandbox", "--disable-gpu", "--disable-dev-shm-usage"],
  });

Optional browser scraping launches Chromium with the sandbox disabled, which is common in some automation setups but weakens browser isolation.

User impactIf browser scraping is enabled, the local environment has more exposure to untrusted web pages than a sandboxed browser would provide.

RecommendationEnable browser scraping only when needed, run it in a contained environment if possible, and avoid using it for sensitive browsing sessions.

Agentic Supply Chain Vulnerabilities

SeverityLowConfidenceHighStatusNote

README.md

pip install requests fpdf2 python-docx
...
npm install puppeteer

The setup instructions install unpinned packages and optional system/browser tooling, which is expected for this skill but leaves dependency versions to the installation environment.

User impactInstalled package versions may vary over time and could introduce compatibility or supply-chain risk.

RecommendationInstall from trusted package sources, consider pinning versions in a controlled environment, and review optional browser tooling before installing it.

Unexpected Code Execution

SeverityLowConfidenceMediumStatusNote

scripts/search.py

urllib.request.urlretrieve(url, font_path)

When generating PDFs without a local CJK font, the script downloads a font from GitHub to /tmp for PDF rendering.

User impactPDF generation may make an additional network request and place a downloaded font file on the local system.

RecommendationPreinstall a trusted CJK font or verify that downloads from GitHub are acceptable in your environment.

Permission boundary

Checks whether tool use, credentials, dependencies, identity, account access, or inter-agent boundaries are broader than the stated purpose.

Identity and Privilege Abuse

SeverityLowConfidenceHighStatusNote

README.md

TAVILY_API_KEY=your_tavily_key_here
BRAVE_API_KEY=your_brave_key_here    # Optional

The skill requires a Tavily API key and optionally a Brave API key, despite registry metadata declaring no required env vars or primary credential.

User impactThe skill needs third-party search credentials for normal operation; those keys may incur usage, billing, or account-rate-limit effects.

RecommendationUse limited-scope API keys where available, store them only in the intended .env file, and review provider billing/rate limits before use.

Sensitive data protection

Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.

Insecure Inter-Agent Communication

SeverityLowConfidenceHighStatusNote

scripts/search.py

requests.post(
            "https://api.tavily.com/search"

User search queries are sent to external search providers; Brave is also used when enabled.

User impactTravel queries, client names, itinerary details, or business-sensitive planning terms entered into the skill may be shared with third-party search APIs.

RecommendationAvoid including confidential client or business details in queries unless those providers are approved for that data.