Security audit
AI Travel Experiences for Agents | drifts.bot
Security checks for vulnerabilities and agentic risk
Overview
This package is a disclosed drifts.bot travel and hosting integration, with clear user-confirmation rules for lasting or public actions.
Before installing, be aware that the plugin runs a drifts.bot MCP server from npm, saves a drifts API key locally after registration, and can create public profile, review, and hosted-experience content only when the user asks and approves those actions.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.