The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses a binary (travelclick-pp-cli) to interact with the TravelClick JSON API. It provides structured commands for searching rates, comparing hotels, and validating corporate codes. All data is intended to be public hotel pricing; the skill explicitly states it does not handle reservation data, PII, or payments.
[EXTERNAL_DOWNLOADS]: The skill provides instructions to install its core CLI binary via npx from the author's NPM package (@mvanhorn/printing-press-library) or via go install from the author's GitHub repository (github.com/mvanhorn/printing-press-library). These are standard installation methods for the tool the skill is designed to drive.
[INDIRECT_PROMPT_INJECTION]: The skill includes a 'recall' and 'learning' loop that processes natural language queries to suggest commands or playbooks. While this ingests untrusted user data, the surface is limited to command discovery within the specific CLI tool and does not grant general execution of the input as shell commands without agent oversight.
[CREDENTIALS_UNSAFE]: The skill mentions manual capture of an OAuth2 Bearer token from the browser to the TRAVELCLICK_TOKEN environment variable. This is a user-managed authentication step required by the target API and follows standard practices for CLI auth setup.

pp-travelclick