Atlas / Skills / borski / Rapidapi

RapidapiCAUTION

skills/borski/rapidapi

AI-powered travel hacking and search with cash, points, miles, and award flights. Drop-in skills and MCP servers for Claude, Codex, and OpenCode.

Verdict
CAUTION
Grade
B
Trust score
89 /100
Version
—
Hosts
—
License
MIT
Stars
693
01

Overview

AI-powered travel hacking and search with cash, points, miles, and award flights. Drop-in skills and MCP servers for Claude, Codex, and OpenCode.

Read from source at commit fda58ab480fdOBSERVED · 2026-10-14
Advertisement
02

What it tells the agent

The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.

---
name: rapidapi
description: Google Flights Live and Booking.com Live search via RapidAPI. Secondary source for cash flight prices and hotel availability when SerpAPI needs a second opinion.
category: hotels
summary: Booking.com hotel prices.
api_key: RapidAPI
license: MIT
---

# RapidAPI Skill

Search Google Flights and Booking.com via RapidAPI scrapers. Secondary source for cash flight prices and hotel/vacation rental pricing.

**Sources:**
- [Google Flights Live API on RapidAPI](https://rapidapi.com/apiheya/api/google-flights-live-api)
- [Booking.com Live API on RapidAPI](https://rapidapi.com/apiheya/api/booking-live-api)

## Authentication

`RAPIDAPI_KEY` is set in `.env`. All requests use `x-rapidapi-key` header.

## Google Flights Live API

Real-time Google Flights scraping. Use when SerpAPI results seem stale or you want a second price opinion.

### Search One-Way

```bash
curl -s -X POST "https://google-flights-live-api.p.rapidapi.com/api/v1/searchFlights" \
  -H "x-rapidapi-key: $RAPIDAPI_KEY" \
  -H "x-rapidapi-host: google-flights-live-api.p.rapidapi.com" \
  -H "Content-Type: application/json" \
  -d '{
    "origin": "SFO",
    "destination": "NRT",
    "date": "2026-08-10",
    "adults": 2,
    "cabinClass": "economy",
    "currency": "USD"
  }' | jq '.'
```

### Search Round Trip

```bash
curl -s -X POST "https://google-flights-live-api.p.rapidapi.com/api/v1/searchFlights" \
  -H "x-rapidapi-key: $RAPIDAPI_KEY" \
  -H "x-rapidapi-host: google-flights-live-api.p.rapidapi.com" \
  -H "Content-Type: application/json" \
  -d '{
    "origin": "SFO",
    "destination": "NRT",
    "date": "2026-08-10",
    "returnDate": "2026-08-26",
    "adults": 2,
    "cabinClass": "economy",
    "currency": "USD"
  }' | jq '.'
```

### Parameters

| Param | Required | Description |
|-------|----------|-------------|
| `origin` | Yes | Airport IATA code |
| `destination` | Yes | Airport IATA code |
| `date` | Yes | `YYYY-MM-DD` departure |
| `returnDate` | No | `YYYY-MM-DD` for round trip |
| `adults` | No | Default 1 |
| `children` | No | Default 0 |
| `infants` | No | Default 0 |
| `cabinClass` | No | `economy`, `premium_economy`, `business`, `first` |
| `currency` | No | Default `USD` |

## Booking.com Live API

Search hotels and vacation rentals with real Booking.com pricing. Good complement to SerpAPI Hotels and LiteAPI.

### Search Hotels

```bash
curl -s "https://booking-live-api.p.rapidapi.com/api/v1/searchHotels?location=Tokyo%2C%20Japan&checkin=2026-08-10&checkout=2026-08-13&adults=2&rooms=1&currency=USD" \
  -H "x-rapidapi-key: $RAPIDAPI_KEY" \
  -H "x-rapidapi-host: booking-live-api.p.rapidapi.com" | jq '.'
```

### Parameters

| Param | Required | Description |
|-------|----------|-------------|
| `location` | Yes | City/area name: `Tokyo, Japan` |
| `checkin` | Yes | `YYYY-MM-DD` |
| `checkout` | Yes | `YYYY-MM-DD` |
| `adults` | No | Default 2 |
| `children` | No | Default 0 |
| `rooms` | No | Default 1 |
| `currency` | No | Default `USD` |
| `sortBy` | No | `price`, `rating`, `popularity` |
| `minPrice` | No | Minimum price filter |
| `maxPrice` | No | Maximum price filter |
| `starRating` | No | `3,4,5` comma-separated |

### Get Hotel Details

```bash
curl -s "https://booking-live-api.p.rapidapi.com/api/v1/getHotelDetails?hotelId=HOTEL_ID&checkin=2026-08-10&checkout=2026-08-13&adults=2" \
  -H "x-rapidapi-key: $RAPIDAPI_KEY" \
  -H "x-rapidapi-host: booking-live-api.p.rapidapi.com" | jq '.'
```

## Rate Limits

Free tier: 100 requests/month across all RapidAPI APIs.
Use sparingly. Prefer SerpAPI for flights and LiteAPI/SerpAPI for hotels as primary sources.

## When to Use

- **Google Flights Live**: Secondary price check when SerpAPI results seem off, or for routes SerpAPI doesn't cover well.
- **Booking.com Live**: When you want Booking.com specific pricing/availability (different inventory than Google Hotels).

Do not:
- Use as primary search (SerpAPI and Seats.aero are primary).
- Burn through free tier on broad searches. Be targeted.
03

Trust audit

CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.

LayerWhat it checksResult
L0Provenance & inventoryWARN
L1Static analysis of the codeNA
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
none-observed
Shell
none-observed
Dependencies
pinned
Secrets in source
none-found

Findings (5)

MEDIUMInventory / provenance · inv.symlink · CWE-1104
.agents/skills
.agents/skills
Why it matters. link not followed
MEDIUMInventory / provenance · inv.symlink · CWE-1104
.claude/skills
.claude/skills
Why it matters. link not followed
MEDIUMInventory / provenance · inv.symlink · CWE-1104
.opencode/skills
.opencode/skills
Why it matters. link not followed
MEDIUMInventory / provenance · inv.symlink · CWE-1104
skills
skills
Why it matters. link not followed
LOWInventory / provenance · inv.symlink · CWE-1104
AGENTS.md
AGENTS.md
Why it matters. link not followed

Gates applied: no_behavioural_pass.

Audited 2026-10-14 · audit v0.4.1 · source sha fda58ab480fdfull audit observations/trust-audit/skill/borski__rapidapi.json · Report an issue / request a re-scan
04

Audit history

Every audit this skill has had.

DateSourceVerdictGradeScoreChange
2026-10-14fda58ab480fdCAUTIONB89first audit
05

Questions

What does the Rapidapi skill do?

AI-powered travel hacking and search with cash, points, miles, and award flights. Drop-in skills and MCP servers for Claude, Codex, and OpenCode.

Is Rapidapi safe to install?

With care. The audit graded it B (89/100) and found 5 things worth knowing before you trust this skill, listed below with the exact line each was found on.

What can Rapidapi access on my machine?

The audit observed no filesystem, network or shell use at all in its source.

How current is this page?

The grade is for one exact copy of the source (fda58ab480fd), read on 2026-10-14. The repository is watched, and a new audit runs when it changes — this is the first audit.

Advertisement