skills/sundial-org/awesome-openclaw-skills/travel-concierge/Socket

travel-concierge

Warn

Audited by Socket on Mar 23, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill's stated purpose is plausible, but its actual footprint depends on an undocumented and unverifiable `travel-concierge` CLI, then optionally feeds that tool a Google Places API key. The scraping/browser-automation behavior is directionally related to the purpose, but install trust and opaque credential/data flow are disproportionate and unresolved.

Confidence: 87%Severity: 84%

Audit Metadata

Analyzed At

Mar 23, 2026, 05:55 PM

Package URL

pkg:socket/skills-sh/sundial-org%2Fawesome-openclaw-skills%2Ftravel-concierge%2F@d70ae30838be48b742b570cf1fef46c16d1eb254