ClawHub

Travel Search Skill

v1.1.1

Search for flights, tours, and excursions with real prices and booking links. Use when the user asks about travel, flights, airfare, hotels, tours, excursion...

⭐ 1· 111·0 current·0 all-time
by@missial
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
CryptoCan make purchases
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (flight/tour/excursion search) matches the files and endpoints used (Aviasales/Travelata/Sputnik8 proxies). No unrelated binaries, env vars, or config paths are requested.
✓
Instruction Scope
SKILL.md restricts behavior to calling the documented HTTP endpoints via the included scripts/api_call.py client and local assets/references. It does not instruct reading arbitrary host files or harvesting credentials.
✓
Install Mechanism
No install spec — instruction-only with a small local Python script using the standard library. Nothing is downloaded from external or untrusted URLs during install.
✓
Credentials
The skill requires no environment variables or credentials. The included client explicitly blocks sensitive headers and limits allowed outbound hosts, so no disproportionate secret access is requested.
✓
Persistence & Privilege
always is false and the skill does not request persistent system-wide privileges or modify other skills. It runs only when invoked by the agent.
Assessment
This skill appears coherent and implements travel searches through a small local HTTP client and documented proxy endpoints (api.botclaw.ru, travelpayouts, etc.). Before installing, note: (1) the skill makes outbound network requests — you are trusting the proxy service (api.botclaw.ru) with search queries and link-shortening; (2) it executes a local Python script (scripts/api_call.py) — review it (already included) and avoid running the skill in an environment containing sensitive local files or credentials; (3) short booking links returned by the proxy may redirect users to external booking sites — verify links if that matters. Otherwise there are no unexpected credential requests or install actions.

Like a lobster shell, security has layers — review code before you run it.

latestvk97ck8z9estpns22s4cxxpj23h84rk6m

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments