ClawHub

flights

v1.1.1

Flight price search. Trigger this skill immediately when the user asks about flights, airfare, ticket prices, cheapest dates, price calendars, departure time...

⭐ 2· 482·4 current·4 all-time
by@syf8888
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
✓
Purpose & Capability
Name, description, and instructions align: the skill parses flight queries, converts cities to IATA codes, aggregates price-calendar queries, and POSTs to a flight-search API. There are no unrelated binaries, installs, or credentials requested.
ℹ
Instruction Scope
SKILL.md explicitly instructs the agent to POST user-provided origin/destination/dates/passenger info to https://skill.flight.51smart.com/api/search. It does not read local files or extra env vars, but it does transmit user PII (travel dates, passenger counts, city choices) to a third-party endpoint without authentication or stated data-retention/privacy terms — a privacy and trust risk worth noting.
✓
Install Mechanism
Instruction-only skill with no install steps and no code files; nothing is written to disk or installed locally.
✓
Credentials
Requires no environment variables, credentials, or config paths — the requested privileges are minimal and proportionate to the stated functionality.
✓
Persistence & Privilege
always is false and the skill is user-invocable; it does not request permanent inclusion or elevated agent-wide privileges.
What to consider before installing
This skill appears to do what it says (flight searches) but will send users' trip details (dates, origins/destinations, passenger counts) to https://skill.flight.51smart.com. Before installing or enabling it, verify the operator/service (51smart) and their privacy policy/data retention practices. Consider asking users for explicit consent before sending personally identifiable travel info, test with non-sensitive queries, and avoid using the skill for queries containing real passenger names, payment info, or other sensitive data. If you need stronger guarantees, prefer skills that use well-known, audited APIs or that document authentication and data-handling practices.

Like a lobster shell, security has layers — review code before you run it.

latestvk9776kkqdhqrcvmvtk9dz6fak58297t3

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments