Locate places using flexible query formats - free-form search or structured address components. Returns coordinates, addresses, and optional street-level pho...
Security Analysis
high confidenceThe skill's code, runtime instructions, and required credential (CAMINO_API_KEY) are coherent with a place-search/geocoding integration and do not request unrelated privileges or secrets.
Name/description (place lookup, geocoding, optional street photos) match the actual behavior: the script and docs call https://api.getcamino.ai/search and only require CAMINO_API_KEY, curl, and jq.
SKILL.md and scripts are focused on forming and POSTing the JSON search payload to the Camino API. They only reference the declared env var and standard shell tools; they do not read unrelated files or exfiltrate data to other endpoints.
This is instruction-only with an included shell script; no install spec writes arbitrary archives to disk. The README suggests npx/pnpm install from a GitHub repo which is common — exercise the usual caution before running remote installers.
Only CAMINO_API_KEY is required and declared as the primary credential. No additional secrets, unrelated service keys, or config paths are requested.
Skill does not request always:true or system-wide changes. It suggests storing the API key in ~/.claude/settings.json (expected for integrations) but does not modify other skills or system settings.
Guidance
This skill appears internally consistent: it needs CAMINO_API_KEY and uses curl/jq to call api.getcamino.ai/search. Before installing or running: (1) Confirm you trust api.getcamino.ai and the GitHub repo referenced by the npx install examples; (2) Prefer using an ephemeral/trial key or set CAMINO_API_KEY only in the environment for the process (avoid placing secrets in global files if you don’t want long-lived storage); (3) Inspect the remote repo/scripts if you plan to run npx/pnpm commands, since those fetch and execute code from the network; (4) Monitor API usage and rotate the key if you suspect misuse.
Latest Release
v0.2.0
- Added curl and jq as required external binaries in the skill metadata for improved clarity on dependencies. - No functional changes to features or usage. Documentation update only.
Popular Skills
Published by @James-southendsolutions on ClawHub
