by liketrek
The most complete open-source travel planner: real-time collaboration, bookings, budgets, packing lists, journals, offline PWA, SSO and an AI-ready MCP server, with planet-wide place search and routing built in.
# Add to your Claude Code skills
git clone https://github.com/liketrek/TREKGuides for using mcp servers skills like TREK.
Last scanned: 10/30/2026
{
"issues": [
{
"type": "npm-audit",
"message": "@hono/node-server: @hono/node-server: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@modelcontextprotocol/sdk: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@rollup/plugin-node-resolve: Vulnerability found",
"severity": "low"
},
{
"type": "npm-audit",
"message": "@vitest/coverage-istanbul: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@vitest/coverage-v8: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@vitest/mocker: Vitest: Code injection via unauthenticated manual mock registration",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "deepmerge: deepmerge mergeObject() allows prototype poisoning of returned objects",
"severity": "low"
},
{
"type": "npm-audit",
"message": "nestjs-zod: Vulnerability found",
"severity": "low"
},
{
"type": "npm-audit",
"message": "postcss-selector-parser: PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustion",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "serialize-javascript: Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script at the end of a serialized function body",
"severity": "low"
},
{
"type": "npm-audit",
"message": "sharp: sharp : Vulnerability in librsvg dependency CVE-2026-96889",
"severity": "high"
},
{
"type": "npm-audit",
"message": "vite: launch-editor: escapeCmdArgs() omits % escaping on Windows",
"severity": "high"
},
{
"type": "npm-audit",
"message": "vite-plugin-pwa: Vulnerability found",
"severity": "low"
},
{
"type": "npm-audit",
"message": "vitest: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "workbox-build: Vulnerability found",
"severity": "low"
}
],
"status": "WARNING",
"scannedAt": "2026-10-30T10:43:25.096Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}See how TREK compares with popular alternatives.
TREK is an open-source mcp servers skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by liketrek. The most complete open-source travel planner: real-time collaboration, bookings, budgets, packing lists, journals, offline PWA, SSO and an AI-ready MCP server, with planet-wide place search and routing built in. It has 15,237 GitHub stars.
TREK returned warnings in SkillsLLM's automated security scan. It has no critical vulnerabilities, but review the flagged issues in the Security Report section before adding it to your workflow.
Clone the repository with "git clone https://github.com/liketrek/TREK" and add it to your Claude Code skills directory (see the Installation section above).
TREK is primarily written in TypeScript. It is open-source under liketrek on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other MCP Servers skills you can browse and compare side by side. Open the MCP Servers category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh TREK against similar tools.
No comments yet. Be the first to share your thoughts!
Top skills in this category by stars
Requires a passing catalog security scan.
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
A self-hosted, real-time collaborative travel planner — with maps, budgets, packing lists, a journal, and AI built in.
Most of what follows is an addon an admin switches on or off. Lists, Costs, Documents, Collab, Tours, Vacay and Atlas ship on; Journey, Collections, MCP, the AI assistant, AI Parsing, Road trip, Dawarich and AirTrail ship off and are marked below.