AlliancesCAUTION
AI-powered travel hacking and search with cash, points, miles, and award flights. Drop-in skills and MCP servers for Claude, Codex, and OpenCode.
Overview
AI-powered travel hacking and search with cash, points, miles, and award flights. Drop-in skills and MCP servers for Claude, Codex, and OpenCode.
fda58ab480fdOBSERVED · 2026-10-14What it tells the agent
The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.
--- name: alliances description: Airline alliance membership (Star Alliance, oneworld, SkyTeam) and cross-alliance booking relationships. Maps which loyalty programs book which airlines, including bilateral partnerships outside alliances. category: reference summary: Star Alliance, oneworld, SkyTeam membership and recent shifts (SAS to SkyTeam, ITA to Star, Hawaiian/Fiji to oneworld). Key cross-alliance booking relationships. --- # Alliance Awareness **Reference data:** `data/alliances.json` Star Alliance, oneworld, and SkyTeam determine which loyalty programs can book which airlines. This is fundamental to award travel. When recommending an award booking, always verify the airline and the booking program are in the same alliance (or have a bilateral partnership). ## Key Booking Relationships - **United MileagePlus** books Star Alliance (ANA, Lufthansa, Singapore, Turkish, etc.) - **Aeroplan** books Star Alliance plus extended partners (including Etihad, Emirates on some routes) - **Virgin Atlantic Flying Club** books ANA, Delta, Air France, KLM (cross-alliance) - **AAdvantage** books oneworld (Cathay, JAL, Qantas, Qatar, BA, etc.) - **Flying Blue** books SkyTeam (Air France, KLM, Delta, Korean Air, etc.) - **Korean Air SKYPASS** books SkyTeam - **Avianca LifeMiles** books Star Alliance (often cheaper than United/Aeroplan) ## Recent Alliance Changes Verify against `data/alliances.json` for current state. These have shifted recently: - SAS moved from Star Alliance to SkyTeam (September 2024) - ITA Airways left SkyTeam (early 2025), joining Star Alliance (first half 2026) - Fiji Airways upgraded to full oneworld member (2025) - Hawaiian Airlines joining oneworld (April 2026) ## Cross-Alliance Bookings Are Where Real Value Hides The best redemptions often involve booking an airline through a program in a DIFFERENT alliance (or no alliance at all). Always check the `cross_alliance_highlights` section of `data/alliances.json` and `data/partner-awards.json`. Examples of cross-alliance plays: - Virgin Atlantic Flying Club books ANA First Class (legendary sweet spot) - Etihad Guest books AAdvantage routes - Alaska Mileage Plan books Starlux (independent airline) ## Partner Awards Reference For the full picture of which programs ticket which airlines, plus bilateral partnerships outside alliances, load the `partner-awards` skill or read `data/partner-awards.json` directly.
Trust audit
CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | NA |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (5)
.agents/skills
.claude/skills
.opencode/skills
skills
AGENTS.md
Gates applied: no_behavioural_pass.
fda58ab480fdfull audit observations/trust-audit/skill/borski__alliances.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-14 | fda58ab480fd | CAUTION | B | 89 | first audit |
Questions
What does the Alliances skill do?
AI-powered travel hacking and search with cash, points, miles, and award flights. Drop-in skills and MCP servers for Claude, Codex, and OpenCode.
Is Alliances safe to install?
With care. The audit graded it B (89/100) and found 5 things worth knowing before you trust this skill, listed below with the exact line each was found on.
What can Alliances access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
How current is this page?
The grade is for one exact copy of the source (fda58ab480fd), read on 2026-10-14. The repository is watched, and a new audit runs when it changes — this is the first audit.