IgnavCAUTION
AI-powered travel hacking and search with cash, points, miles, and award flights. Drop-in skills and MCP servers for Claude, Codex, and OpenCode.
Overview
AI-powered travel hacking and search with cash, points, miles, and award flights. Drop-in skills and MCP servers for Claude, Codex, and OpenCode.
fda58ab480fdOBSERVED · 2026-10-14What it tells the agent
The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.
---
name: ignav
description: Fast REST API flight search via ignav.com. Cash prices, booking links, market selection for price arbitrage. Include in every flight search alongside Duffel and other sources.
category: flights
summary: Fast REST API cash prices. Market selection for arbitrage.
api_key: Ignav (1,000 free)
allowed-tools: Bash(curl *)
---
# Flight Search via Ignav API
Fast REST API flight search at `https://ignav.com`. Returns structured JSON with prices, itineraries, and booking links. 1,000 free requests, no rate limit.
## Setup
Get a free API key at https://ignav.com/signup (1,000 requests, no credit card).
Set `IGNAV_API_KEY` in your environment or `.env` file.
## Workflow
1. Parse the user's request (origin, destination, dates, trip type, passengers, cabin)
2. Look up airport codes if user gave city names
3. Search flights (one-way or round-trip)
4. Present results in markdown table
5. Get booking links if user wants to book
## Endpoints
### Search Airports
```bash
curl -s "https://ignav.com/api/airports?q=Barcelona&limit=5" \
-H "X-Api-Key: $IGNAV_API_KEY"
```
### One-Way Flights
```bash
curl -s -X POST "https://ignav.com/api/fares/one-way" \
-H "X-Api-Key: $IGNAV_API_KEY" \
-H "Content-Type: application/json" \
-d '{
"origin": "SFO",
"destination": "JFK",
"departure_date": "2026-05-15",
"adults": 1,
"cabin_class": "economy"
}'
```
### Round-Trip Flights
```bash
curl -s -X POST "https://ignav.com/api/fares/round-trip" \
-H "X-Api-Key: $IGNAV_API_KEY" \
-H "Content-Type: application/json" \
-d '{
"origin": "SFO",
"destination": "JFK",
"departure_date": "2026-05-15",
"return_date": "2026-05-20",
"adults": 1,
"cabin_class": "economy"
}'
```
### Booking Links
```bash
curl -s -X POST "https://ignav.com/api/fares/booking-links" \
-H "X-Api-Key: $IGNAV_API_KEY" \
-H "Content-Type: application/json" \
-d '{"ignav_id": "the_itinerary_id", "adults": 1}'
```
## Parameters
| Parameter | Type | Description |
|-----------|------|-------------|
| `adults` | int | Number of adults (default: 1) |
| `children` | int | Number of children (default: 0) |
| `cabin_class` | string | `economy`, `premium_economy`, `business`, `first` |
| `max_stops` | int | 0 (direct only), 1, or 2 |
| `max_price` | int | Maximum price filter |
| `departure_time_range` | object | `{"earliest_hour": 8, "latest_hour": 20}` |
| `airlines_include` | array | Only these airline codes |
| `airlines_exclude` | array | Exclude these airline codes |
| `market` | string | Country code for pricing (default: "US"). Different markets return different prices. |
## Response Structure
Each itinerary contains:
- `price`: `{"amount": 299, "currency": "USD"}`
- `outbound`: carrier, duration_minutes, segments array
- `inbound`: same (null for one-way)
- `cabin_class`: the cabin class
- `bags`: `{"carry_on": 1, "checked": 0}`
- `ignav_id`: unique ID for booking links
Each segment: `marketing_carrier_code`, `flight_number`, `departure_airport`, `departure_time_local`, `arrival_airport`, `arrival_time_local`, `duration_minutes`, `aircraft`.
## Output Format
**Always use markdown tables.**
| # | Airline | Stops | Duration | Depart | Arrive | Price | Bags |
|---|---------|-------|----------|--------|--------|-------|------|
| 1 | Vueling | Nonstop | 2h 15m | 8:30 AM | 10:45 AM | EUR 125 | 1 carry-on |
| 2 | Ryanair | Nonstop | 2h 20m | 6:15 AM | 8:35 AM | EUR 89 | 1 carry-on |
After the table, highlight cheapest, fastest, and best value. Call out tradeoffs. Offer booking links.
## Notes
- Dates are required for all searches
- Default to round-trip and economy if not specified
- Use airport search endpoint for city name lookups
- **Market affects prices.** Same route can cost significantly less from a different market. Try departure country first, then destination country.
- **Does NOT include Southwest.** Use google-flights skill for SW.Trust audit
CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | NA |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (5)
.agents/skills
.claude/skills
.opencode/skills
skills
AGENTS.md
Gates applied: no_behavioural_pass.
fda58ab480fdfull audit observations/trust-audit/skill/borski__ignav.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-14 | fda58ab480fd | CAUTION | B | 89 | first audit |
Questions
What does the Ignav skill do?
AI-powered travel hacking and search with cash, points, miles, and award flights. Drop-in skills and MCP servers for Claude, Codex, and OpenCode.
Is Ignav safe to install?
With care. The audit graded it B (89/100) and found 5 things worth knowing before you trust this skill, listed below with the exact line each was found on.
What can Ignav access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
How current is this page?
The grade is for one exact copy of the source (fda58ab480fd), read on 2026-10-14. The repository is watched, and a new audit runs when it changes — this is the first audit.