Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Air France
v1.0.8提供法国航空公司介绍及航班查询,涵盖舱位等级、行李规定和预订指南,助力欧洲及法国旅行规划。
⭐ 0· 117·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
The metadata/description claims flight queries, cabin/baggage rules, and booking guidance. The SKILL.md only defines static information modules (history, business scope, global layout, news) and directs users to the official website — no instructions for querying flights, live data, or handling bookings. This is a substantive mismatch between claimed capability and what the skill actually does.
Instruction Scope
SKILL.md is instruction-only and confined to producing static informational content; it does not read files, request credentials, call external APIs, or transmit user data. However, the instructions are vague and do not implement the dynamic behaviors (real-time flight search/bookings) advertised in the description.
Install Mechanism
No install spec and no code files — lowest-risk deployment. Nothing is written to disk or downloaded.
Credentials
The skill requests no environment variables, credentials, or config paths. This is appropriate for a read-only informational skill, though also consistent with its limited functionality.
Persistence & Privilege
always:false and standard invocation settings. The skill does not request elevated persistence or access to other skills' configs.
What to consider before installing
This skill does not request any credentials and appears safe from a secrets/exfiltration perspective, but it does not deliver the dynamic flight-search or booking functionality claimed in its description. If you need live schedules, booking, or baggage fee calculations, use the official Air France site or a skill that explicitly documents API access and required credentials. Before installing: (1) confirm with the publisher what '航班查询' actually does, (2) do not rely on this skill for real-time bookings or purchase decisions, and (3) prefer skills that document their data sources (APIs) if you need live data.Like a lobster shell, security has layers — review code before you run it.
latestvk9708sh3hbr3cqee2s56f2k7ad84xyff
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
