SerpApi Flights (Google Flights)

Query Google Flights via SerpApi for flight schedules, prices, and cabin class info. Use when user asks about flight/机票/航班 prices, schedules, or comparisons.

This skill appears coherent and limited to calling SerpApi. Before installing: (1) Treat SERPAPI_KEY as a secret — the script sends it in the query string to serpapi.com; do not share keys in public prompts. (2) Confirm you trust SerpApi and understand its billing/rate limits (free tier ~100 searches/month). (3) Ensure your node version supports global fetch and node:util parseArgs (Node 18+ recommended). (4) Review the included script yourself if you want to confirm no additional logging of sensitive context; the code prints query info and results to the console. (5) If you need tighter security, run the script in a restricted environment and rotate the API key if it is exposed.

Type: OpenClaw Skill Name: serpapi-flights Version: 1.0.0 The skill bundle is designed to query Google Flights via SerpApi. The `SKILL.md` provides clear instructions and examples without any prompt injection attempts. The `scripts/query.mjs` script correctly retrieves the `SERPAPI_KEY` from environment variables and uses `node:util.parseArgs` for robust command-line argument parsing, mitigating shell injection risks. Network requests are made to the legitimate `serpapi.com` endpoint, and there is no evidence of data exfiltration, malicious execution, persistence mechanisms, or obfuscation. The code aligns with its stated purpose and lacks high-risk behaviors.