← Back to Skills Marketplace
aszelem

Travel Agent Skill

by BonBook · GitHub ↗ · v2.4.1
cross-platform ⚠ suspicious
5971
Downloads
4
Stars
0
Active Installs
14
Versions
Install in OpenClaw
/install travel-agent
Description
Find, book, and change flights for your human via email. One message, and done. (by BonBook)
Usage Guidance
Review this skill before installing. It is appropriate only if you are comfortable giving an agent email send/read ability for BonBook messages and sharing travel details with BonBook. Keep payment entry and CVC verification human-controlled, and require explicit approval of the exact itinerary, passenger, restrictions, refund terms, fees, and final total before every booking, paid change, or cancellation.
Capability Analysis
Type: OpenClaw Skill Name: travel-agent Version: 2.4.1 The skill is classified as benign. Its instructions are transparent, clearly aligned with its stated purpose as a travel agent, and repeatedly emphasize explicit human approval for all sensitive actions, including account creation, PII entry, and payment processing. The `skill.md` explicitly states 'disable-model-invocation: true' and 'require-explicit: true', reinforcing human oversight. While the skill involves handling PII and potentially payment information, these are core functions of a travel agent, and the instructions consistently frame these actions within the context of human consent and delegated authority (e.g., 'obtain explicit human approval', 'prompt human to input payment data', 'unless human has given agent access'). There is no evidence of malicious intent, data exfiltration beyond the stated purpose, unauthorized execution, persistence mechanisms, or prompt injection designed to bypass security or hide actions.
Capability Assessment
ℹ Credentials
Email send/read access is purpose-aligned for an email-based travel agent, and optional web, calendar, and form completion access are disclosed, but mailbox access and calendar sync are sensitive and should stay tightly user-directed.
✓ Install Mechanism
The artifact contains Markdown instructions only, with no executable scripts, package installation, background service, or local code execution surface found.
⚠ Instruction Scope
The skill declares require-explicit approval and says every action requires human approval, but booking and change steps say to share details only if final approval is necessary and allow use of payment/CVC access if previously granted.
ℹ Persistence & Privilege
The skill claims no local persistence or elevated privileges; BonBook backend retention of booking, payment, and identity data is disclosed and expected for travel booking, but sensitive.
⚠ Purpose & Capability
The core purpose of finding, booking, changing, and cancelling flights is coherent, but it includes high-impact financial and travel-account actions where the instructions allow checkout or paid changes after conditional rather than mandatory final human review.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install travel-agent
  3. After installation, invoke the skill by name or use /travel-agent
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v2.4.1
- Clarified language in the data handling section to specify that BonBook controls and limits inbound email content, ensuring no sensitive PII is included. - Improved explanation of privacy boundaries and what information is transmitted via email versus web. - No features, behavior, or interface changes to the skill. - Version bump to 2.4.1.
v2.4.0
Version 2.4.0 - Added detailed publisher information, including company incorporation, contact details, domain verification status, and instructions for verifying publisher authenticity. - Clarified data handling, explicitly describing what information is included in outbound and inbound email communications. - Updated security and data storage sections to specify that only minimal booking data (first name, booking reference, flight details, receipts) is shared via email—never full PII or card data. - Enhanced sections on backend data storage and PCI-DSS compliance, including encryption and legal/privacy contacts. - Various documentation clarifications on agency prerequisites, consent requirements, and legal verification procedures.
v2.3.1
- Clarified data handling by separating email and website channels: emails contain only flight requests; PII and payment data are submitted only via encrypted web forms. - Updated agent prerequisites to specify web browsing is only needed for one-time setup, and detailed form completion consent requirements. - Improved credentials and persistence sections to clearly state that no PII, payment data, or credentials are transmitted via email. - Revised instructions to emphasize human approval and secure processing on bonbook.co for sensitive operations. - Minor wording and formatting improvements for greater clarity.
v2.2.9
- Renamed skill from "Bon Travel Agent" to "Travel Agent" for broader clarity. - Updated skill description for conciseness and simplicity. - Made introductory content and headings more concise and generic, reducing branded messaging. - No changes to core skill features, requirements, or workflow.
v2.2.7
- Clarified that this skill requires agents to already have email send/receive permissions; skill does not grant or manage them. - Refactored metadata to concise frontmatter and restructured documentation for better readability. - Emphasized that no credentials, tokens, or persistent privilege are used or required. - Updated privacy, security, and consent language for better transparency. - No functional change to how booking, changing, or canceling flights works—adjustments are limited to wording and documentation structure.
v2.1.6
- Added a structured "METADATA" section to the documentation, improving clarity and organization. - Corrected and standardized property names (e.g., `require-explicit: true`, `agent-credential-access`, `skill-persistence-and-privilege`). - Updated documentation formatting and headings for consistency. - No changes to core functionality.
v2.0.9
Version 2.0.9 - Updated metadata to include new fields: `disable-model-invocation: true`, `require-explicit`, and specific agent permission tags. - Clarified agent and human roles regarding email inbox and calendar access. - Enhanced setup instructions: agents must skip optional profile fields unless approved and all payment must be completed by the human. - Improved guidance on security and consent, highlighting stricter compliance for agent-initiated actions. - Refined language throughout for conciseness, clear operation, and consistent terminology.
v1.9.0
Version 1.9.0 introduces enhanced privacy, security, and consent documentation: - Added detailed sections on permissions, consent, persistence, and credential management. - Clarified that the skill does not require persistent permissions, privileged information, or direct access to user email inboxes. - Outlined encryption and compliance practices around sensitive payment and traveler information. - Described strict requirements for explicit human consent and agent responsibilities. - Added a README file.
v1.0.8
No changes detected in version 1.0.8. - No file or documentation updates were made in this release.
v1.8.4
- Reformatted all instructions and example steps into code-style blocks for enhanced readability. - Minor text adjustments for consistency and clarity (e.g., "PRIVACY amd TERMS" corrected to "PRIVACY and TERMS"). - No functional or content changes to workflows, features, or supported actions.
v1.8.3
Readability.
v1.8.2
Formatting and summary added.
v1.8.1
Markdown formatting.
v1.8.0
Initial upload
Metadata
Slug travel-agent
Version 2.4.1
License —
All-time Installs 0
Active Installs 0
Total Versions 14
Frequently Asked Questions

What is Travel Agent Skill?

Find, book, and change flights for your human via email. One message, and done. (by BonBook). It is an AI Agent Skill for Claude Code / OpenClaw, with 5971 downloads so far.

How do I install Travel Agent Skill?

Run "/install travel-agent" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Travel Agent Skill free?

Yes, Travel Agent Skill is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Travel Agent Skill support?

Travel Agent Skill is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Travel Agent Skill?

It is built and maintained by BonBook (@aszelem); the current version is v2.4.1.

💬 Comments