Amadeus Flight Query

This skill appears to legitimately call the Amadeus API, but take these precautions before installing or using it: - The scripts include hardcoded API key and secret defaults and default to Amadeus's test endpoint. Treat those embedded credentials as potentially sensitive (or potentially public test credentials). Remove or replace them with your own keys and never rely on the bundled defaults for production. - SKILL.md mentions AMADEUS_BASE_URL but that env var is not listed in the declared requirements — make sure to set AMADEUS_BASE_URL to https://api.amadeus.com for production if you want real data. Confirm any environment variables used by the code are intentionally set. - Review the two provided scripts (scripts/airports.mjs and scripts/query.mjs) yourself; they perform HTTP requests to Amadeus endpoints and will send whatever API key/secret they have access to. If you must keep these scripts, remove hardcoded secrets and ensure the runtime environment injects only the intended credentials. - Because the skill will make network calls, consider whether you trust the destination (Amadeus) and that network access is acceptable in your environment. Monitor usage and rotate keys if you install and use the skill. If you want the skill to be acceptable for production use: remove embedded credentials, update SKILL.md to declare AMADEUS_BASE_URL, and ensure the required env var list matches what the code reads.