travel flight monitor

• Outcome: Pass
• Latest audit: May 29, 2026, 8:19 PM
• Version:
  1.0.3

Overview

This is a coherent flight-price monitoring skill, but it can use a logged-in browser profile and recurring checks, so users should configure it carefully.

Install only if you are comfortable with recurring flight checks, local retention of travel monitoring history, and browser automation using a logged-in profile. Use a dedicated travel/browser profile where possible, set a monitoring end date, and delete old monitoring tasks and memory files when no longer needed.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The skill explicitly instructs use of a logged-in `openclaw` browser profile but does not warn users that browser automation may access pages using their existing authenticated session and associated account data. This can lead to unintended use or exposure of personal travel data, saved passenger details, loyalty information, or account-scoped pricing/results, especially when automation runs on scheduled tasks.

VirusTotal

66/66 vendors flagged this skill as clean.