Skip to content
← Registry
Trust Report

govisit-search-destinations

Search GoVisit destinations by name or traveler intent and return canonical destination codes and URLs. Use when a traveler needs to identify or explore a country, region, district, city, or highlight.

84
CONDITIONAL
Format: openclawScanner: v0.8.1Duration: 5msScanned: 22h ago · Nov 11, 2:40 PMSource →
Embed this badge
AgentVerus CONDITIONAL 84AgentVerus CONDITIONAL 84AgentVerus CONDITIONAL 84
[![AgentVerus](https://agentverus.ai/api/v1/skill/d1b9be93-7b52-4712-a025-85e3ebe88608/badge)](https://agentverus.ai/skill/d1b9be93-7b52-4712-a025-85e3ebe88608)
Community Discussion

Community Comments

Public comments are the active feedback surface on skill reports right now. Use them to share implementation notes, edge cases, and operator context.

0 comments

Sign in to comment on this skill

No comments yet. Be the first to share your thoughts.

Continue the workflow

Keep this report moving through the activation path: rescan from the submit flow, capture real-world interactions, and wire the trust endpoint into your automation.

https://agentverus.ai/api/v1/skill/d1b9be93-7b52-4712-a025-85e3ebe88608/trust
Personalized next commands

Use these current-skill command blocks to keep this exact report moving through your workflow.

Record an interaction
curl -X POST https://agentverus.ai/api/v1/interactions \
  -H "Authorization: Bearer at_your_api_key" \
  -H "Content-Type: application/json" \
  -d '{"agentPlatform":"openclaw","skillId":"d1b9be93-7b52-4712-a025-85e3ebe88608","interactedAt":"2026-03-15T12:00:00Z","outcome":"success"}'
Fetch trust JSON
curl https://agentverus.ai/api/v1/skill/d1b9be93-7b52-4712-a025-85e3ebe88608/trust

Category Scores

68
Permissions
100
Injection
54
Dependencies
100
Behavioral
70
Content
100
Code Safety

Findings (11)

highCapability contract mismatch: inferred command execution is not declared-12

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: exec

→ Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
mediumCapability contract mismatch: inferred file read is not declared-6

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: references/

→ Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
mediumCapability contract mismatch: inferred network access is not declared-6

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: https://raw.githubusercontent.com/inhotel-io/govisit-toolkit/v0.2.0/skills/govisit-search-destinations/SKILL.md

→ Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-04
mediumCapability contract mismatch: inferred documentation ingestion is not declared-8

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: references/

→ Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
mediumMany external URLs referenced (7)-8

The skill references 7 external URLs and also discusses auth/API/payment workflows, which increases the chance that sensitive operations depend on many remote endpoints.

URLs: https://raw.githubusercontent.com/inhotel-io/govisit-toolkit/v0.2.0/skills/govisit-search-destinations/SKILL.md, https://govisit.ai/api/tools/v1/search_destinations`, https://raw.githubusercontent.com/inhotel-io/govisit-toolkit/v0.2.0/skills/govisit-search-destinations/references/contract.json, https://govisit.ai/.well-known/webmcp.json, https://github.com/inhotel-io/govisit-toolkit/releases/download/v0.2.0/govisit-skill-search-destinations.tar.gz...

→ Minimize external dependencies to reduce supply chain risk.

dependenciesASST-04
mediumRaw content URL reference-10

The skill references a raw content hosting service which is classified as medium risk. Merged overlapping signals from the repeated finding family: - Raw content URL reference

https://raw.githubusercontent.com/inhotel-io/govisit-toolkit/v0.2.0/skills/govisit-search-destinations/SKILL.md

→ Use official package registries instead of raw content URLs. Raw URLs can be changed without notice.

dependenciesASST-04
mediumUnknown external reference-8

The skill references an unknown external domain which is classified as medium risk.

https://govisit.ai/api/tools/v1/search_destinations`

→ Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
lowUnknown external reference-5

The skill references an unknown external domain which is classified as low risk.

https://govisit.ai/.well-known/webmcp.json

→ Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
lowUnknown external reference-5

The skill references an unknown external domain which is classified as low risk.

https://govisit.ai/.well-known/agent-skills/index.json

→ Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
lowUnknown external reference

The skill references an unknown external domain which is classified as low risk.

https://govisit.ai/en/docs/general/data-use-license

→ Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
lowNo explicit safety boundaries-10

The skill does not include explicit safety boundaries defining what it should NOT do.

No safety boundary patterns found

→ Add a 'Safety Boundaries' section listing what the skill must NOT do (e.g., no file deletion, no network access beyond needed APIs).

contentASST-09