Travel Planner

Name/description (travel planning) matches what the skill does: it posts user-provided waypoint JSON to Camino's /journey endpoint. The only required credential is CAMINO_API_KEY, which is appropriate for that API. Declared binaries (curl, jq) are used by the included script.

SKILL.md and the shell script only validate JSON, require at least two waypoints, and send the JSON to https://api.getcamino.ai/journey. Instructions to obtain a trial key and to add CAMINO_API_KEY to ~/.claude/settings.json are within scope. There are no instructions to read unrelated files, access other env vars, or transmit data to unexpected endpoints.

This is instruction-only with a small included shell script; there is no automatic download-from-URL or opaque binary install in the skill itself. SKILL.md suggests using npx to add a GitHub-hosted skills repo (user-run action) — advise reviewing that repo before running, but the skill's own files are simple and transparent.

Only CAMINO_API_KEY is required and is the declared primary credential. No other secrets, unrelated credentials, or config paths are requested. The script uses that key only to call the Camino API.

Skill is not always-enabled and does not request elevated or persistent system privileges. It does not modify other skills or system-wide configs beyond the guidance to add the API key to the user's Claude settings (a normal per-user config step).