Zim

Agent travel middleware for searching flights, hotels, and car rentals, assembling policy-aware itineraries, managing traveler preferences, and preparing pay...

What to check before installing or enabling this skill: - Confirm provenance: the registry lists no homepage and the source is 'unknown'. Only enable code from sources you trust. - Verify environment variables: the package needs several sensitive keys (TRAVELPAYOUTS_TOKEN, TRAVELPAYOUTS_MARKER, STRIPE_SECRET_KEY, STRIPE_WEBHOOK_SECRET, OPENROUTER_API_KEY, SERPAPI_KEY). Do not supply production Stripe keys unless you understand and have tested payment flows; prefer test keys (sk_test_...) and restrict their use to an isolated environment. - Don’t run the QA scripts or orchestrator with live keys unless you intend to make outbound calls to LLM/search APIs — these scripts call external services and may consume quota or leak keys in logs. - Inspect and sandbox before install: because the package contains executable Python code and shell wrappers, consider installing and running it inside a contained environment (dedicated VM or container) and do a code review of entry points (scripts/zim-wa.sh, scripts/zim-whatsapp-handler.py, zim/__main__.py, zim/orchestrator.py, zim/llm_agent.py, etc.). - Be cautious about symlinking into ~/.openclaw/skills or auto-registering: that will make the skill discoverable and runnable by agents; only do this after you’ve reviewed how the wrapper sets env vars and where it persists state (data/whatsapp_state.db). - Investigate the prompt-injection signal: search SKILL.md and other files for hidden or injected directives (phrases like 'ignore previous instructions') and remove or sanitize them before enabling autonomous invocation. - If you need narrower exposure: avoid setting LLM or payment keys in the environment; run the skill in read-only or demo mode, or stub out network calls until you validate behavior. If you want, I can: (a) list files that reference specific env vars (so you can audit where secrets are used), (b) extract exact lines where the prompt-injection pattern appears, or (c) suggest a minimal safe runtime command to exercise the package without enabling payments/LLM calls.

Type: OpenClaw Skill Name: zim Version: 3.0.2 The 'zim' skill bundle is a well-structured travel orchestration middleware that enables searching and booking flights, hotels, and car rentals via multiple providers (Travelpayouts, SerpApi, Kiwi, Booking.com). It includes a FastAPI-based API, a stateful WhatsApp agent, and comprehensive logic for managing traveler preferences, corporate policies, and Stripe-based payment flows. The package demonstrates security awareness by implementing Bearer token authentication for its API, validating Stripe and Twilio webhook signatures, and providing strict behavioral instructions in SKILL.md and Python prompts to prevent agent hallucinations or character breaks. No evidence of malicious intent, data exfiltration, or unauthorized execution was found.