← Back to Skills Marketplace
169
Downloads
0
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install matrix-mate-offline-skill
Description
Matrix Mate — ITA Matrix flight search and parse tool for parsing ITA Matrix itinerary links, auditing fare rules, and producing traveler-safe summaries thro...
Usage Guidance
This skill appears to do what it says: it expects you to run a local Matrix Mate app and to run npm install in the bundle root before starting the MCP server. Things to check before installing or running: 1) Be aware of and document the optional env vars MATRIX_MATE_BASE_URL and MATRIX_MATE_ALLOW_REMOTE_BASE_URL — by default network calls are restricted to loopback, only set the override if you trust a remote host. 2) Treat any pasted itinerary JSON or fare-rule text as untrusted input (the skill notes prompt-injection risk). 3) Review and run npm install in a controlled environment (npm packages are pulled from the registry). 4) The bundle does not require API keys or credentials; if you are asked later to add credentials or point to a hosted endpoint, reassess. Overall the bundle is coherent and local-first; the main fix I recommend is to declare the optional environment variables in the skill metadata so operators see them up front.
Capability Analysis
Type: OpenClaw Skill
Name: matrix-mate-offline-skill
Version: 1.0.3
The Matrix Mate skill bundle is a legitimate tool designed to interface with a local flight parsing application via the Model Context Protocol (MCP). It includes proactive security measures, such as a loopback-only enforcement check in `scripts/runtime/client.mjs` to prevent the agent from being used for SSRF, and explicit safety guardrails in `SKILL.md` and `SECURITY.md` that restrict the agent to read-only flight data analysis. The code logic is transparent, lacks obfuscation, and contains no evidence of data exfiltration or unauthorized command execution.
Capability Assessment
Purpose & Capability
Name/description match the code and bundles: the skill implements a local MCP server that forwards parse requests to a Matrix Mate HTTP service (default http://127.0.0.1:3000). Required binaries (node, npm) and the declared install dependency (@modelcontextprotocol/sdk) are proportional to an MCP-based Node skill.
Instruction Scope
SKILL.md and README instruct running a local stdio MCP and using browser automation only for read/search capture. Runtime scripts only access bundled example files, local filesystem to resolve the skill root, and the local Matrix Mate HTTP endpoints. The project explicitly calls out prompt-injection risk from itinerary/rules text and recommends treating tool output as data; that is appropriate and should be heeded.
Install Mechanism
Install spec pulls an npm package (@modelcontextprotocol/sdk) and the bundle includes package.json/package-lock.json. No arbitrary downloads, IP addresses, URL shorteners, or extract-from-unknown-host steps are present. This is a normal Node/npm install pattern (moderate trust surface from npm but expected).
Credentials
The code reads optional environment variables (MATRIX_MATE_BASE_URL and MATRIX_MATE_ALLOW_REMOTE_BASE_URL) to override the local base URL and to opt into non-loopback hosts, but the skill metadata lists no required env vars. While these vars are operator-controlled and the code enforces loopback by default, the SKILL.md/registry metadata should declare these env vars so operators know about them before install. Requiring MATRIX_MATE_ALLOW_REMOTE_BASE_URL to enable remote hosts is an important security-sensitive override and should be highlighted in metadata.
Persistence & Privilege
The skill is not always-enabled, does not request elevated platform privileges, and does not modify other skills or system-wide agent settings. It runs as a local MCP server invoked by the agent when used (standard behavior).
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install matrix-mate-offline-skill - After installation, invoke the skill by name or use
/matrix-mate-offline-skill - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.3
Hotfix: added explicit validator-safe safety notice clarifying env override + strict localhost default network guard.
v1.0.2
Hotfix: strict-local MATRIX_MATE_BASE_URL enforcement; remote hosts require explicit MATRIX_MATE_ALLOW_REMOTE_BASE_URL=true opt-in.
v1.0.1
SEO-optimized listing name/metadata, security notes, and release-ready offline MCP bundle.
Metadata
Frequently Asked Questions
What is Matrix Mate - ITA Matrix Flight Search and Parse Tool?
Matrix Mate — ITA Matrix flight search and parse tool for parsing ITA Matrix itinerary links, auditing fare rules, and producing traveler-safe summaries thro... It is an AI Agent Skill for Claude Code / OpenClaw, with 169 downloads so far.
How do I install Matrix Mate - ITA Matrix Flight Search and Parse Tool?
Run "/install matrix-mate-offline-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Matrix Mate - ITA Matrix Flight Search and Parse Tool free?
Yes, Matrix Mate - ITA Matrix Flight Search and Parse Tool is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Matrix Mate - ITA Matrix Flight Search and Parse Tool support?
Matrix Mate - ITA Matrix Flight Search and Parse Tool is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Matrix Mate - ITA Matrix Flight Search and Parse Tool?
It is built and maintained by Gerald He (@skylinehk); the current version is v1.0.3.
More Skills