Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Vanio AI

v0.1.0

Connect your agent to Airbnb, Booking.com & VRBO via Vanio AI — the only way to manage vacation rentals from OpenClaw. 140 tools for reservations, guests, me...

0· 79·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for ivannikolovbg/vanio.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Vanio AI" (ivannikolovbg/vanio) from ClawHub.
Skill page: https://clawhub.ai/ivannikolovbg/vanio
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required env vars: VANIO_API_KEY
Required binaries: vanio
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install vanio

ClawHub CLI

Package manager switcher

npx clawhub@latest install vanio
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description, required binary 'vanio', primary env var VANIO_API_KEY, and the npm package @vanio-ai/cli align: the skill is a CLI that connects to Vanio's API for property management.
Instruction Scope
SKILL.md instructs use of the vanio CLI (login, ask, chat, config). Runtime instructions reference only ~/.config/vanio/config.json, VANIO_API_KEY, and optionally VANIO_API_URL, and perform expected actions (open browser, run local callback server, call api.vanio.ai). There are no instructions to read unrelated system files or exfiltrate arbitrary data.
Install Mechanism
Install uses npm package @vanio-ai/cli (creates 'vanio' binary). npm installs are a common, expected mechanism for CLIs; this is moderate-risk compared to no-install, but appropriate for a Node CLI. Recommend verifying the package on the npm registry (publisher, version, integrity) before installing.
Credentials
Only VANIO_API_KEY is required (primary credential) and optional VANIO_API_URL; this is proportional to a service-API CLI. The CLI stores the API key plaintext in ~/.config/vanio/config.json—standard for many CLIs but worth noting because the key is persisted unencrypted.
Persistence & Privilege
Skill is not always-enabled and does not request system-wide privileges. It writes only to its own config path (~/.config/vanio/config.json) and does not modify other skills or system settings.
Assessment
This appears to be a legitimate CLI skill. Before installing: (1) confirm the npm package @vanio-ai/cli on the npm registry is the official publisher and matches vanio.ai; (2) be aware the CLI will store your VANIO_API_KEY in plaintext at ~/.config/vanio/config.json (consider using a scoped API key with limited permissions); (3) the CLI opens your browser and runs a temporary localhost server during login — this is normal for OAuth but ensure you run that flow only when you trust the site; (4) if you have security policies about CLI installs, review the package contents or vendor documentation first. If any of these raise concerns (unknown publisher, untrusted registry package), do not install.
src/index.ts:169
Shell command execution detected (child_process).
dist/index.cjs:2
Environment variable access combined with network send.
src/index.ts:34
Environment variable access combined with network send.
!
dist/index.cjs:2
File read combined with network send (possible exfiltration).
!
src/index.ts:1
File read combined with network send (possible exfiltration).
Patterns worth reviewing
These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🏠 Clawdis
Binsvanio
EnvVANIO_API_KEY
Primary envVANIO_API_KEY

Install

Install Vanio CLI (npm)
Bins: vanio
npm i -g @vanio-ai/cli
latestvk97cjstps7xknbcxxz1qs9y69x844cqc
79downloads
0stars
1versions
Updated 3w ago
v0.1.0
MIT-0

Vanio AI — Connect Your Agent to Airbnb, Booking.com & VRBO

Vanio AI is an AI property manager that lets you run your vacation rental portfolio fully autonomously. Connect to Airbnb, Booking.com, and VRBO, create your own direct booking website, and manage everything — guest communication, smart locks, payments, cleaning teams, and more — all powered by AI.

This skill is the only way to connect your OpenClaw agent to Airbnb and Booking.com. It gives your agent access to Vanio's full AI system — 140 tools across every aspect of property management.

Setup

  1. Sign up at vanio.ai and connect your Airbnb/Booking.com/VRBO accounts
  2. Login via browser:
vanio login

Or with an API key (from Settings → API Keys):

vanio login <your-api-key>

Usage

Ask a question (single query)

vanio ask "What are today's check-ins?"
vanio ask "What's the WiFi password at Alpine Lodge?" --listing 42
vanio ask "Why was this guest charged extra?" --reservation 214303
vanio ask "Send a message to the guest in reservation 214303 asking about their ETA"
vanio ask "Create a maintenance task for unit 5 - broken shower head"
vanio ask "What are my occupancy rates for April?"
vanio ask "Unlock the front door at Beach House" --listing 15

Interactive chat

vanio chat

Maintains conversation context across turns — useful for multi-step operations.

Check connection

vanio status

What the agent can do

Reservations — Search, view details, create direct bookings, modify dates, cancel, move between listings

Guest CRM — Search guests, view profiles, add contacts, flag guests, view booking history

Messaging — Send guest messages (auto-routes to Airbnb/Booking.com/WhatsApp/SMS/email), internal notes, team chat with @mentions

Tasks — Create, update, complete, cancel operational tasks (cleaning, maintenance, inspections)

Smart Locks & IoT — List devices, create/delete access codes, lock/unlock remotely, sync devices

Payments — View payment history, charge guests, process refunds

Knowledge Base — Search, create, edit articles (check-in guides, WiFi info, house rules, parking)

Workflows & Automations — Create, update, toggle automated workflows

Analytics — Revenue forecasts, occupancy rates, listing performance, training scores

Listings — View properties, update amenities, rooms, content, pricing, push to platforms

Calendars — Check availability, block/unblock dates, update pricing

Websites — Manage direct booking websites

Service Providers — Manage cleaning/maintenance teams, schedules, marketplace

Emails — Search email history, send status updates

AI Settings — Configure AI modes, escalation policies, notification preferences

Tips

  • The agent automatically determines which tools to use based on your natural language query
  • For reservation-specific questions, use --reservation <id> for best context
  • For property-specific questions, use --listing <id>
  • The agent remembers conversation context in chat mode
  • Complex operations (cancellations, charges, lock changes) will ask for confirmation before executing

Configuration

vanio config                          # Show current config
vanio config set baseUrl <url>        # Custom API URL (self-hosted)
vanio config set apiKey <key>         # Update API key

Config stored at ~/.config/vanio/config.json.

Comments

Loading comments...