duffel

SUSPICIOUS: The skill’s capabilities largely fit a flight-booking purpose and its data flows are mostly proportionate, with strong instructions against collecting card data or exposing secrets. The main issue is install/execution trust: the core `duffel` CLI used for flight operations was not verified as an official published CLI, so the skill relies on an unverifiable executable for sensitive travel and payment-adjacent actions. No confirmed credential theft or malicious exfiltration is evident, but the unverifiable binary and real-world action surface make the skill high security risk.