mcp-charter-planner

Plan BVI sailing charters with real anchorages, weather-aware routing, provisioning lists, and local knowledge. Returns complete itineraries tailored by expe...

Security Scan

The skill's code, instructions, and requirements are consistent with a BVI charter planner, but it instructs the agent to run an npx-installed package (remote npm code) and shows a small package-name/author mismatch that you should verify before running.

Purpose & Capability

Name, description, and shipped source implement a sailing charter planner (anchorage DB, weather season logic, itinerary generator). Required binary (npx) is plausible for the provided MCP packaging approach.

Instruction Scope

SKILL.md instructs the agent to start an MCP server with npx and documents the plan_charter parameters. The instructions do not ask the agent to read unrelated files, environment variables, or to exfiltrate data. They do, however, rely on installing and running remote npm code at runtime (npx).

Install Mechanism

There is no formal install spec in registry metadata, but SKILL.md directs use of npx to fetch @vbotholemu/mcp-charter-planner. Installing via npx executes code fetched from npm (moderate risk). The package sources are included in the skill bundle for inspection, which reduces uncertainty, but runtime behavior will still depend on whatever is published to npm under that package name.

Credentials

No environment variables, credentials, or filesystem paths are requested. The code does not reference secrets or unrelated system config.

Persistence & Privilege

Skill is not always-enabled and allows normal agent invocation. It does not request elevated platform persistence or modify other skills' configs.

Assessment

This skill appears to be what it says (BVI charter planning) and ships readable source, but before installing or running it with npx: 1) verify the npm package name and publisher (SKILL.md uses @vbotholemu while README mentions @velocibot — confirm which package you'll fetch). 2) Inspect the published npm package contents (or prefer installing from the bundled source) because npx will fetch and run remote code. 3) If you want to be cautious, run the tool in a sandboxed environment or vendor the package locally and pin a specific trusted version. 4) Check the package's dependency list and recently published versions on the npm registry for unexpected changes. If you can provide the npm package URL or publisher identity, I can re-check for mismatches or red flags and raise confidence.

BVI Charter Planner

Generate complete British Virgin Islands sailing charter itineraries with real anchorages, weather considerations, and local tips.

Setup

{
  "mcpServers": {
    "charter-planner": {
      "command": "npx",
      "args": ["-y", "@vbotholemu/mcp-charter-planner"]
    }
  }
}

Tool: plan_charter

Parameter	Type	Required	Description
days	number	yes	Trip duration (3-14 days)
guests	number	yes	Number of guests
experience	string	no	beginner, intermediate, or expert
interests	string	no	Preferences: snorkeling, dining, remote, nightlife

Returns

• Day-by-day itinerary with real BVI anchorages (The Baths, Norman Island, Jost Van Dyke, Anegada, etc.)
• Experience-appropriate routing and sail distances
• Seasonal weather patterns (trade winds, hurricane season, swell risks)
• Guest-count-scaled provisioning lists with BVI-specific tips
• Customs clearance, mooring ball protocols, national park fees
• Restaurant and activity recommendations

When to Use

• Charter vacation planning
• Sailing trip research
• BVI travel preparation
• Group trip logistics