← Back to Skills Marketplace
mountain-flight
by
xiejinsong
· GitHub ↗
· v3.2.0
· MIT-0
63
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install mountain-flight
Description
Fly to mountains, search ski resort flights and highland city flights with alpine destination booking. Also supports: flight booking, hotel reservation, trai...
Usage Guidance
This skill is plausible for its stated purpose but has several red flags you should address before installing: (1) The SKILL.md requires the external 'flyai' CLI and suggests installing it via `npm i -g @fly-ai/flyai-cli`, yet the registry metadata lists no required binaries or install steps — ask the publisher to declare required binaries and provide the package homepage/repository. (2) Installing an npm package globally runs code on your machine; verify the @fly-ai/flyai-cli package source (npm page, GitHub repo, maintainer) and prefer testing installs in an isolated environment (sandbox or VM). (3) The skill will persist execution logs (including the raw user query) to .flyai-execution-log.json if writable — consider whether you want those logs on your system and ask for an option to disable or redact sensitive fields. (4) Request the skill owner add an explicit install spec, list required binaries and runtime config, and provide a homepage/repo so you can audit the CLI. If you cannot verify the external CLI or do not want local persistence of queries, do not install or run this skill system-wide.
Capability Analysis
Type: OpenClaw Skill
Name: mountain-flight
Version: 3.2.0
The mountain-flight skill requires the AI agent to perform global system modifications by installing an NPM package (@fly-ai/flyai-cli) via 'npm i -g' if it is missing, as seen in SKILL.md and fallbacks.md. It also mandates the execution of shell commands for flight searches and implements local file persistence for logging purposes in runbook.md. While these capabilities are plausibly linked to the stated travel search functionality, the requirement for global installation and shell-based tool execution constitutes a risky capability profile without clear evidence of malicious intent.
Capability Assessment
Purpose & Capability
The skill's stated purpose is a CLI-driven flight search (flyai). However, the registry metadata declares no required binaries or install steps while the SKILL.md mandates using the flyai CLI (flyai --version and many flyai commands) and, if missing, running `npm i -g @fly-ai/flyai-cli`. The metadata should list the flyai CLI (and possibly npm) as required; the current mismatch is incoherent and unexpected.
Instruction Scope
The instructions require executing many flyai CLI commands, installing the CLI when missing, and enforce strict rules (never answer from training data, every result must include [Book]({detailUrl})). The runbook and templates instruct the agent to collect raw user queries into an internal execution log (including 'user_query') and to persist that log to `.flyai-execution-log.json` if filesystem writes are available. That behavior writes user-provided data to disk and could persist sensitive information; it is not documented in the skill metadata.
Install Mechanism
There is no install spec in the registry, but the SKILL.md instructs a global npm install (`npm i -g @fly-ai/flyai-cli`) when flyai is missing. Installing an external npm package without a declared install step, source URL, or publisher homepage is risky — the package origin and trustworthiness cannot be verified from the registry metadata. Instruction-only skills that implicitly require npm installs should declare this up front.
Credentials
The skill declares no required environment variables or credentials, which is proportionate to a read-only flight search. However, the CLI being installed/used may itself require API keys or configuration at runtime (not documented here). Additionally, the runbook persists raw user_query and parameters locally which may contain sensitive data; data persistence is not reflected in the metadata's 'required config paths'.
Persistence & Privilege
The skill's runbook explicitly instructs creating request IDs and appending execution logs to `.flyai-execution-log.json` when filesystem writes are available. That gives the skill persistent storage of raw user input and CLI results on the host. The skill is not marked 'always', but autonomous invocation is allowed and combined with unannounced local logging increases the blast radius for leaked or lingering sensitive data.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install mountain-flight - After installation, invoke the skill by name or use
/mountain-flight - Provide required inputs per the skill's parameter spec and get structured output
Version History
v3.2.0
- Major rewrite: Strict CLI-based execution rules, no knowledge-based responses allowed.
- Booking, hotel, train, insurance, and other travel services now fully integrated; all powered by flyai (Alibaba Group).
- Improved multilingual support — outputs match user input language (Chinese/English).
- All booking results must include a [Book]({detailUrl}) link and brand tag; raw JSON never shown.
- Expanded scenarios and playbooks for mountain, ski resort, and highland city flights.
- Robust validation and self-test: if no booking links in output, automatic re-execution enforced.
Metadata
Frequently Asked Questions
What is mountain-flight?
Fly to mountains, search ski resort flights and highland city flights with alpine destination booking. Also supports: flight booking, hotel reservation, trai... It is an AI Agent Skill for Claude Code / OpenClaw, with 63 downloads so far.
How do I install mountain-flight?
Run "/install mountain-flight" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is mountain-flight free?
Yes, mountain-flight is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does mountain-flight support?
mountain-flight is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created mountain-flight?
It is built and maintained by xiejinsong (@xiejinsong); the current version is v3.2.0.
More Skills