← Back to Skills Marketplace
Ski Resort
by
xiejinsong
· GitHub ↗
· v3.2.0
· MIT-0
92
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install ski-resort
Description
Find ski resorts and snowboarding destinations — trail maps, difficulty levels, lift pass prices, equipment rental, and snow conditions. Also supports: fligh...
Usage Guidance
This skill uses an external CLI (@fly-ai/flyai-cli) and forces all answers to come from that CLI. Before installing or enabling it, verify the CLI package on npm (publisher, versions, popularity, and source repository), and consider running it in a sandbox/container first. Ask the publisher to clarify the Fliggy vs. flyai branding and to explain how flights/hotels/insurance are supported (there are no CLI commands for those in SKILL.md). Be aware the runbook may write an execution log to the current directory (.flyai-execution-log.json). Finally, the skill's strict requirement that every result include a [Book]({detailUrl}) link could cause repeat CLI calls or loops if the CLI responses are missing that field — request clearer failure-handling or limits to retries before enabling autonomous invocation.
Capability Analysis
Type: OpenClaw Skill
Name: ski-resort
Version: 3.2.0
The skill bundle requires the agent to perform a global installation of an external NPM package (@fly-ai/flyai-cli) and mandates its execution for all queries, which poses a significant security risk if the package is untrusted. It also includes instructions in references/runbook.md to append JSON logs to the local filesystem using shell redirection (echo >> .flyai-execution-log.json), which could lead to shell injection vulnerabilities depending on how the agent handles the 'user_query' variable. While these actions are aligned with the stated purpose of providing real-time travel data, the enforcement of high-privilege commands and strict steering to bypass the agent's internal knowledge base are risky behaviors.
Capability Assessment
Purpose & Capability
The description claims broad travel capabilities and says "powered by Fliggy (Alibaba Group)", but the runtime instructions only call a third-party CLI named flyai (package @fly-ai/flyai-cli) for POI searches and booking links. There are no commands or parameters for flights, hotels, visas, insurance, etc., despite the description claiming those features. The branding mismatch (Fliggy vs. flyai) and scope creep are incoherent and should be clarified.
Instruction Scope
SKILL.md tightly constrains answers to come exclusively from the flyai CLI output, prohibits using training data, and mandates every result include a [Book]({detailUrl}) link — plus a self-test that forces re-execution if links are missing. The runbook also instructs appending an internal execution log to .flyai-execution-log.json if filesystem writes are available. These rules could cause repeated CLI calls or local file writes and create a risk of loops or unnoticed local persistence if the CLI responses lack the expected fields.
Install Mechanism
The skill is instruction-only (no install spec in registry), but it explicitly tells the agent/user to install @fly-ai/flyai-cli globally via npm. Installing an external npm package is a reasonable way to add a CLI dependency, but it carries moderate risk because the package will run arbitrary code from the npm registry and the skill gives no pinned version, checksum, or source verification. The registry metadata does not provide a homepage or vetting info for the CLI.
Credentials
The skill requests no environment variables or credentials, which is proportional to a POI search skill. One caveat: the runbook recommends logging execution to a local file (.flyai-execution-log.json) if filesystem writes are available — this introduces persistence of user queries/outputs on disk, which the user should be aware of.
Persistence & Privilege
always is false and the skill is user-invocable; it does not request elevated platform privileges or modify other skills. The only persistent action in the documents is optional appending of an execution log to the current working directory, which is a limited local write rather than a privilege escalation.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install ski-resort - After installation, invoke the skill by name or use
/ski-resort - Provide required inputs per the skill's parameter spec and get structured output
Version History
v3.2.0
ski-resort 3.2.0 changelog:
- Enforces CLI-only data sourcing: All answers must be generated from flyai CLI command output, never from pre-existing knowledge or training data.
- Adds strict execution rules: Bookable links required in every response, with automatic self-check for compliance.
- Expands support for additional travel services, including flights, hotels, trains, attraction tickets, itineraries, visas, insurance, and car rentals via Fliggy.
- Formalizes parameter collection and output formatting steps, referencing SOP/playbook/template files.
- Clearly segregates domain knowledge for parameter mapping only—never for direct answers.
- Strengthens bilingual handling (auto-detects and mirrors user language: Chinese/English).
Metadata
Frequently Asked Questions
What is Ski Resort?
Find ski resorts and snowboarding destinations — trail maps, difficulty levels, lift pass prices, equipment rental, and snow conditions. Also supports: fligh... It is an AI Agent Skill for Claude Code / OpenClaw, with 92 downloads so far.
How do I install Ski Resort?
Run "/install ski-resort" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Ski Resort free?
Yes, Ski Resort is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Ski Resort support?
Ski Resort is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Ski Resort?
It is built and maintained by xiejinsong (@xiejinsong); the current version is v3.2.0.
More Skills