← Back to Skills Marketplace
xiejinsong

national-day-flight

by xiejinsong · GitHub ↗ · v3.2.0 · MIT-0
cross-platform ⚠ suspicious
65
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install national-day-flight
Description
Book National Day holiday flights for October 1st Golden Week travel. Also supports: flight booking, hotel reservation, train tickets, attraction tickets, it...
Usage Guidance
Before installing or using this skill: 1) Verify the npm package @fly-ai/flyai-cli — check its npm page, publisher, repository, and recent maintainer activity; do not run global installs from unknown publishers. 2) Confirm the "Fliggy (Alibaba)" claim with the skill author or documentation — the SKILL.md uses 'flyai' branding, not Fliggy, which is inconsistent. 3) If you must test, run the CLI installation in an isolated environment (VM/container) first to observe postinstall behavior. 4) Ask the author whether any booking or account credentials are required at runtime (none are declared). 5) Be cautious about the skill's strict re-run/self-test rules — they could cause repeated installs or loops; if you enable autonomous invocation, monitor initial runs closely and restrict scope until you trust the CLI. If you cannot confirm the package/source, treat this skill as untrusted and avoid installing the global npm package.
Capability Analysis
Type: OpenClaw Skill Name: national-day-flight Version: 3.2.0 The skill requires the agent to perform a global installation of an external NPM package (`@fly-ai/flyai-cli`) if the command is not found (`SKILL.md`, `references/fallbacks.md`). While this is functionally consistent with the travel booking purpose, the practice of auto-installing global dependencies is a high-risk behavior that could lead to Remote Code Execution (RCE) if the package is compromised. No direct evidence of data exfiltration or intentional malice was found in the provided logic.
Capability Assessment
Purpose & Capability
The skill declares it is "powered by Fliggy (Alibaba Group)" and claims support for hotels, trains, and more, but all runtime instructions require a CLI named flyai (npm package @fly-ai/flyai-cli) and only show flight-search commands. The Fliggy/brand claim and broader service list are not supported by the instructions — this inconsistency could be marketing noise or a sign that the source/third-party integration is misdeclared.
Instruction Scope
The SKILL.md instructs the agent to always use the flyai CLI and to install it via `npm i -g @fly-ai/flyai-cli` if missing. It enforces hard rules (never answer from training data, always include [Book](detailUrl) links, re-run until conditions are satisfied). Those strict re-execution/self-test rules risk repeated installs/CLI invocations and could create loops or unexpected side effects if the CLI behaves poorly. The instructions do not request or reference any system credentials, nor do they read unrelated files, but the forced global npm install writes to the host and should be vetted.
Install Mechanism
There is no install spec in the registry, but the runtime instructions require a global npm install of @fly-ai/flyai-cli. Installing a global package from an unverified namespace is a moderate risk: npm packages execute arbitrary code during install/postinstall, and the skill provides no homepage, source repo, or verified registry link to validate the package. The install command will modify the system (global npm).
Credentials
The skill requests no environment variables or credentials, which is proportionate for a read-only flight search skill that only returns booking links. However, the description implies booking and other services (hotels, trains) which typically require account credentials; the absence of credential requirements could mean the skill only produces search results/links, or it could indicate omitted/hidden steps. Confirm whether actual booking requires separate credentials or authentication in the CLI.
Persistence & Privilege
The skill does not request 'always: true' and does not declare any persistent modifications to other skills or system-wide configuration. Autonomous invocation is allowed (platform default), which is expected for skills of this type.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install national-day-flight
  3. After installation, invoke the skill by name or use /national-day-flight
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v3.2.0
Version 3.2.0 — Major rules and structure update, focused on CLI integrity and strict travel data source enforcement. - Clearly mandates all results must originate from flyai CLI (never training data), with strict enforcement and self-validation rules. - Adds robust mandatory CLI environment checks; requires flyai-cli installation if absent. - Enforces booking link presence ([Book]({detailUrl})) in all replies; missing link triggers workflow halt and correction. - Expands multi-modal booking: supports flights, hotels, trains, attractions, visas, travel insurance, and car rental for Golden Week. - Defines specialized CLI playbooks for different user intents (cheapest, fastest, direct flights, etc.). - Improved multilingual support (auto-detected Chinese/English response). - Enhanced output rules: summary-first format, tips for National Day, comparison table, strict Markdown layout.
Metadata
Slug national-day-flight
Version 3.2.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is national-day-flight?

Book National Day holiday flights for October 1st Golden Week travel. Also supports: flight booking, hotel reservation, train tickets, attraction tickets, it... It is an AI Agent Skill for Claude Code / OpenClaw, with 65 downloads so far.

How do I install national-day-flight?

Run "/install national-day-flight" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is national-day-flight free?

Yes, national-day-flight is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does national-day-flight support?

national-day-flight is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created national-day-flight?

It is built and maintained by xiejinsong (@xiejinsong); the current version is v3.2.0.

💬 Comments