Is jhalmari/moltflights safe?

https://github.com/openclaw/skills/tree/main/skills/jhalmari/moltflights

88
SAFE

MoltFlights is a legitimate flight search skill that provides API access to flight pricing and airport code lookup functionality. The skill contains only documentation and configuration files with no executable code or malicious patterns detected.

Category Scores

Prompt Injection 85/100 · 30%
Data Exfiltration 80/100 · 25%
Code Execution 95/100 · 20%
Clone Behavior 95/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 75/100 · 5%

Findings (2)

INFO External API Dependencies -20 ▶

The skill makes HTTP GET requests to moltflights.com API endpoints for flight search functionality. While legitimate, these external calls could theoretically be misused to transmit data via URL parameters.

INFO External URL References -15 ▶

The skill references external URLs that the agent will interact with, though no malicious prompt injection patterns were detected in the content.