Idealista

Query Idealista API via idealista-cli (OAuth2 client credentials).

Security Scan

The skill's requirements and instructions match its stated purpose (calling Idealista via a local idealista-cli); nothing requests unrelated credentials or system access.

Purpose & Capability

Name/description, required binaries (python3), and required environment variables (IDEALISTA_API_KEY, IDEALISTA_API_SECRET) match the declared purpose of using the Idealista OAuth2 client-credentials flow via a Python CLI.

Instruction Scope

SKILL.md only instructs the agent to run the local idealista_cli Python module, obtain tokens, run searches, and mentions the CLI config and token cache paths in the user's home directory — all within the scope of querying Idealista. It does not ask for unrelated files, secrets, or to transmit data to unexpected endpoints.

Install Mechanism

The skill is instruction-only (no code shipped), and SKILL.md metadata suggests installing the upstream idealista-cli by git cloning from GitHub (https://github.com/quifago/idealista-cli). GitHub is a common source and low risk, but running code from that repo requires trusting the upstream project. There is a minor inconsistency: the registry metadata states no install spec while SKILL.md includes an install suggestion.

Credentials

The two required environment variables are the OAuth client_id and client_secret needed to call Idealista's API; this is proportional and expected. No unrelated credentials or broad secrets are requested.

Persistence & Privilege

The skill does not request always-on presence and does not require modification of other skills or system-wide settings. It uses normal agent invocation behavior.

Assessment

This skill is coherent for querying Idealista, but note that it expects you to run a local Python CLI (idealista-cli) which may be obtained from the linked GitHub repo. Before installing or running it: (1) review the upstream repository code or its releases to ensure you trust it; (2) run it in a virtualenv or sandbox if you want to limit impact; (3) avoid hard-coding your client secret in shared shells — use a secure secret store if available; and (4) verify the CLI's config/token file locations (~/.config/idealista-cli/config.json and ~/.cache/idealista-cli/token.json) are protected appropriately.

This skill documents how to query the Idealista API using the local idealista-cli.

Local project location

• CLI source (example): ~/idealista-cli

Credentials (client_id / client_secret)

Idealista uses OAuth2 Client Credentials.

Use environment variables (recommended):

• IDEALISTA_API_KEY = client_id
• IDEALISTA_API_SECRET = client_secret

Example:

export IDEALISTA_API_KEY="<CLIENT_ID>"
export IDEALISTA_API_SECRET="<CLIENT_SECRET>"

Or persist them via the CLI:

python3 -m idealista_cli config set \
  --api-key "<CLIENT_ID>" \
  --api-secret "<CLIENT_SECRET>"

Config file path:

• ~/.config/idealista-cli/config.json

Token cache:

• ~/.cache/idealista-cli/token.json

Common commands

Get a token:

python3 -m idealista_cli token
python3 -m idealista_cli token --refresh

Search listings:

python3 -m idealista_cli search \
  --center "39.594,-0.458" \
  --distance 5000 \
  --operation sale \
  --property-type homes \
  --all-pages \
  --format summary

Compute stats:

python3 -m idealista_cli avg \
  --center "39.594,-0.458" \
  --distance 5000 \
  --operation sale \
  --property-type homes \
  --group-by propertyType

Example queries (natural language)

Use these as “prompt” examples for an agent that calls the CLI:

• "Find a flat in A Coruña under 200.000€"
• "Tell me the average price of a house around here: 39°34'33.5"N 0°30'10.0"W"
• "Búscame un apartamento de 3 habs en Tapia de Casariego para comprar"