Skiplagged Flights
v1.0.1Use when the user asks to "find flights", "compare itineraries", "search hidden-city routes", "check cheapest dates", "explore destinations", "search hotels"...
⭐ 3· 2.7k·5 current·10 all-time
by@wzs
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (Skiplagged flight searching) match the runtime instructions: all actions are calls to Skiplagged's public MCP endpoint using the mcporter CLI. Requiring the mcporter binary is coherent with the stated purpose.
Instruction Scope
SKILL.md only instructs the agent to call the public MCP URL with mcporter, format results for users, and surface booking links/caveats. It does not request reading unrelated files, environment variables, or other system state.
Install Mechanism
Install uses the npm/node package 'mcporter' which creates the mcporter binary. This is a reasonable approach for providing a CLI, but npm packages run arbitrary code on install—users should verify the package's provenance (npm page, source repository) before installing.
Credentials
The skill declares no environment variables, no credentials, and no config paths. That is proportionate for a public-read-only MCP client.
Persistence & Privilege
always is false and the skill does not request persistent/privileged system changes or access to other skills' config. It does not store or require credentials.
Assessment
This skill is coherent for searching Skiplagged's public MCP. Before installing: (1) verify the 'mcporter' npm package is the legitimate project (check the npm page and GitHub repo referenced in SKILL.md), since npm installs run code on your machine; (2) prefer the ad-hoc HTTPS call pattern shown (mcporter call https://mcp.skiplagged.com/...) so the skill doesn't depend on local MCP config; (3) when the skill returns booking/deep links, verify links point to expected domains before clicking; and (4) if you cannot or will not install third-party npm packages, you can still use Skiplagged manually via the website—installing this skill is optional.Like a lobster shell, security has layers — review code before you run it.
latestvk9717vhppf1mtv4semd47bp07s819jfz
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
✈️ Clawdis
Binsmcporter
Install
Install mcporter (node)
Bins: mcporter
npm i -g mcporter