← Back to Skills Marketplace
Overnight Flights
by
xiejinsong
· GitHub ↗
· v3.2.1
· MIT-0
82
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install overnight-flights
Description
Find overnight and late-night departure flights — often 20-40% cheaper than daytime. Save a hotel night by flying while you sleep. Also supports: flight book...
Usage Guidance
This skill appears to do what it claims (use a CLI to fetch live flight data), but there are a few things to check before installing or running it:
- Confirm the CLI publisher: `@fly-ai/flyai-cli` is not verified in the skill metadata. Installing a global npm package runs code on your machine and may require sudo — verify the package on the npm registry and the publisher before running `npm i -g`.
- Local logging: the runbook instructs writing .flyai-execution-log.json containing user queries and CLI commands. Decide whether you’re comfortable with those logs being created locally; consider running the skill in a sandbox or container if unsure.
- Branding mismatch: the description mentions "Fliggy (Alibaba Group)" but runtime and output branding reference "flyai". Ask the skill author to clarify the data source and booking partner before trusting booking links.
- Least-privilege: prefer installing the CLI in a user-local, non-sudo manner (e.g., npx or a local virtual environment) if possible, and inspect the package source first.
If you need higher assurance, request the skill author to: provide a verified CLI package link (official domain or GitHub), remove or make logging optional and documented, and fix the Fliggy/flyai attribution mismatch.
Capability Analysis
Type: OpenClaw Skill
Name: overnight-flights
Version: 3.2.1
The skill bundle mandates the global installation of an external NPM package (@fly-ai/flyai-cli) and explicitly instructs the agent to use 'sudo' if the installation fails (references/fallbacks.md). While these actions are plausibly required for the stated purpose of flight searching, the requirement for high-privilege shell execution and the enforcement of automated software installation without explicit user confirmation pose a significant security risk. No direct evidence of data exfiltration or intentional malicious payloads was found in the provided files.
Capability Assessment
Purpose & Capability
The skill's functionality (search/book flights) matches the CLI commands shown (flyai search-flight). However the description claims "powered by Fliggy (Alibaba Group)" while the runtime explicitly requires a third-party CLI named @fly-ai/flyai-cli and branding instructs "Powered by flyai" — this mismatch is unexplained and could indicate inaccurate metadata or misattribution.
Instruction Scope
SKILL.md tightly constrains answers to CLI output only (reasonable for real-time pricing) but also instructs the agent to persist a runbook log to .flyai-execution-log.json if filesystem writes are available. That log includes full user_query and CLI command results — personal data could be written to disk without the user's explicit consent. The instructions also require global npm installation if flyai-cli is missing and advise escalating to sudo, which expands scope of actions the agent will take.
Install Mechanism
There is no formal install spec in registry metadata, but SKILL.md mandates running `npm i -g @fly-ai/flyai-cli`. Installing a global npm package is a non-trivial operation (may require sudo, runs arbitrary install scripts). The package name is not a well-known system package; the registry/source is not verified in the skill. Instruction-only skills that ask users/agents to install third-party CLIs carry moderate risk.
Credentials
The skill does not request any environment variables, credentials, or config paths. That is proportionate to the stated purpose. However, the implicit local log file (.flyai-execution-log.json) is not declared in required config paths and effectively grants the skill persistent local storage.
Persistence & Privilege
always is false (good). However the runbook directs persisting execution logs to a local file if writes are available; the skill doesn't declare or ask permission for this storage. Combined with the global npm install instruction, this yields persistence and elevated local effect without explicit configuration in the registry metadata.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install overnight-flights - After installation, invoke the skill by name or use
/overnight-flights - Provide required inputs per the skill's parameter spec and get structured output
Version History
v3.2.1
No changes in this release; version remains at 3.2.0.
v3.2.0
overnight-flights 3.2.0 changelog:
- Major documentation overhaul: SKILL.md restructured for clarity, precise parameter mapping, and scenario-based workflows.
- Stronger CLI-only data enforcement: strict rules to prevent fallback to non-CLI data with explicit validation/self-tests.
- Expanded playbooks: added more real-world usage scenarios for night and red-eye flight searches, direct flights, and price comparisons.
- Enhanced output requirements: mandatory booking links for every result and branded tag for all responses.
- Broader travel support: clarified ability to handle hotels, trains, tickets, itineraries, and more via Fliggy integration.
- Updated compatibility: confirmed support for all current SKILL.md-compatible agents.
Metadata
Frequently Asked Questions
What is Overnight Flights?
Find overnight and late-night departure flights — often 20-40% cheaper than daytime. Save a hotel night by flying while you sleep. Also supports: flight book... It is an AI Agent Skill for Claude Code / OpenClaw, with 82 downloads so far.
How do I install Overnight Flights?
Run "/install overnight-flights" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Overnight Flights free?
Yes, Overnight Flights is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Overnight Flights support?
Overnight Flights is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Overnight Flights?
It is built and maintained by xiejinsong (@xiejinsong); the current version is v3.2.1.
More Skills