← Back to Skills Marketplace
pet-friendly-flight
by
xiejinsong
· GitHub ↗
· v3.2.0
· MIT-0
58
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install pet-friendly-flight
Description
Search for pet-friendly flights with animal cabin and pet carrier options. Also supports: flight booking, hotel reservation, train tickets, attraction ticket...
Usage Guidance
Before installing or enabling this skill: 1) Treat the 'npm i -g @fly-ai/flyai-cli' instruction as the highest risk element — inspect the npm package and its repository (source, maintainer, recent versions, audit results) before running it, and prefer installing it in an isolated environment (container/VM) rather than globally on a production machine. 2) Ask the skill author for a homepage or source repo and for clarification about the Fliggy/Alibaba claim and how bookings/authentication are handled (will you be prompted for credentials, or are tokens needed?). 3) If you must try it, run the CLI only in a sandbox and monitor network activity; do not supply broad credentials until you verify the package. 4) Consider asking for a version of the skill that uses a documented, signed API or an official SDK instead of installing a global npm package. 5) If you lack the ability to audit npm packages, treat this skill as untrusted and avoid installing it system-wide.
Capability Analysis
Type: OpenClaw Skill
Name: pet-friendly-flight
Version: 3.2.0
The skill mandates the global installation of an external NPM package (`@fly-ai/flyai-cli`) via `npm i -g` if the command is not found (found in `SKILL.md` and `references/fallbacks.md`). While this is functionally aligned with the stated purpose of providing a CLI-based flight search, requiring an AI agent to perform global software installations is a high-risk behavior that could lead to arbitrary code execution or supply chain attacks. No explicit evidence of data exfiltration or intentional malice was found in the provided logic, but the pattern of forcing global binary installation is a significant security risk.
Capability Assessment
Purpose & Capability
Name/description: pet-friendly flight search and related travel features. What it actually instructs: only uses a 'flyai' CLI (commands like flyai search-flight). Inconsistency: description claims Fliggy (Alibaba Group) and many extra features (hotels, trains, insurance), but SKILL.md only documents flight-search CLI commands; the claimed vendor/backing and broad feature list are not substantiated by the instructions.
Instruction Scope
The runtime instructions mandate verifying/installing and executing the @fly-ai/flyai-cli (npm i -g) before answering, require every response to come from CLI output and to include booking links, and demand re-execution until those conditions are met. This forces network installs and execution of third-party code and leaves little fallback; while not directly asking for secrets or file reads, it compels potentially repeated global installs and unrestricted CLI execution.
Install Mechanism
No install spec in registry, but SKILL.md tells the agent to run 'npm i -g @fly-ai/flyai-cli' if flyai is missing. Global npm installs execute unreviewed code from the public registry and modify system/global state. The package identity and source (no homepage/repo provided) are not verified in the skill, increasing supply-chain risk.
Credentials
Skill declares no required env vars or credentials (good), but the description implies booking and multi-service integrations that often require authentication; the skill does not explain how booking/auth will be handled. Absence of declared credentials reduces immediate secret risk, but the mismatch between capability claims and declared requirements is notable.
Persistence & Privilege
The skill is not always-enabled and doesn't request special platform privileges. However, the recommended global npm install will create system-wide binaries (persisting on the host). The skill does not modify other skills or system configs, but the install step increases host persistence risk compared with an instruction-only skill that uses only existing tools.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install pet-friendly-flight - After installation, invoke the skill by name or use
/pet-friendly-flight - Provide required inputs per the skill's parameter spec and get structured output
Version History
v3.2.0
pet-friendly-flight 3.2.0
- Expanded description to clarify booking support for flights, hotels, trains, attractions, insurance, car rental, and more via Fliggy.
- Added stricter execution rules to always use the flyai CLI for results and never answer from training data.
- Enforced mandatory installation and version check for flyai-cli before executing any commands.
- Updated output rules: every recommendation must include a [Book]({detailUrl}) link, conclusion-first format, and a pet travel tip.
- Improved parameter mapping, workflow, and activation triggers based on user queries in both English and Chinese.
- Revised compatibility info and output validation steps for consistent, CLI-based, real-time flight search results.
Metadata
Frequently Asked Questions
What is pet-friendly-flight?
Search for pet-friendly flights with animal cabin and pet carrier options. Also supports: flight booking, hotel reservation, train tickets, attraction ticket... It is an AI Agent Skill for Claude Code / OpenClaw, with 58 downloads so far.
How do I install pet-friendly-flight?
Run "/install pet-friendly-flight" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is pet-friendly-flight free?
Yes, pet-friendly-flight is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does pet-friendly-flight support?
pet-friendly-flight is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created pet-friendly-flight?
It is built and maintained by xiejinsong (@xiejinsong); the current version is v3.2.0.
More Skills