← Back to Skills Marketplace
spring-break-flight
by
dingtom336-gif
· GitHub ↗
· v1.0.0
· MIT-0
45
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install spring-break-flight
Description
Book spring break flights for student vacations and spring holiday travel. Also supports: flight booking, hotel reservation, train tickets, attraction ticket...
Usage Guidance
Before installing or running this skill: (1) Verify the source and homepage of the skill and of the npm package @fly-ai/flyai-cli — check the package on the npm registry, its publisher, repository, and recent activity. (2) Ask the skill author to declare required binaries and provide a proper install spec (or a vetted, signed package URL) rather than only runtime install instructions. (3) Request clarity on how authentication is handled (where credentials are stored or required) and why no env vars are declared despite referencing third-party services. (4) Avoid running global npm installs from unknown packages on production machines — test in a sandbox/VM first. (5) Be cautious of the self-test/re-execute requirement: it can cause repeated network activity; request that the skill include deterministic failure behavior and limits. If these questions are not satisfactorily answered, treat the skill as untrusted and do not install the CLI globally or run it with privileged accounts.
Capability Analysis
Type: OpenClaw Skill
Name: spring-break-flight
Version: 1.0.0
The skill requires the agent to perform a global installation of an external NPM package (@fly-ai/flyai-cli) and execute CLI commands, which introduces supply chain and local execution risks. While these actions are functionally aligned with the flight-searching purpose, the mandatory 'npm i -g' command and the use of forceful imperative instructions to override the agent's internal knowledge base are high-risk patterns. No explicit evidence of malicious intent or data exfiltration was found in SKILL.md.
Capability Assessment
Purpose & Capability
Name/description claim a flight/hotel/travel booking skill which coheres with the CLI commands in SKILL.md (flyai search-flight). However the skill metadata lists no required binaries or install spec while the instructions mandate the flyai CLI and a global npm package install. The SKILL.md also claims 'powered by Fliggy (Alibaba Group)' but no homepage, source, or credential requirements are provided. These mismatches are unexplained and reduce confidence.
Instruction Scope
SKILL.md requires running flyai CLI commands and, if missing, installing @fly-ai/flyai-cli globally at runtime. It enforces strict behaviors (never answer without CLI output, always include [Book](detailUrl) links, re-run if checks fail). The doc references local reference files that are not included in the bundle. The re-execute/self-test instruction could cause repeated network installs/executions and an execution loop if the CLI or outputs differ from expectations.
Install Mechanism
There is no declared install spec in the registry metadata, but the runtime instructions tell the agent to run 'npm i -g @fly-ai/flyai-cli' if flyai is absent. Asking agents to install a global npm package at runtime is a moderate-to-high risk action (arbitrary code from the npm registry). The skill doesn't provide a verifiable upstream URL, package hash, or publisher info to validate safety.
Credentials
The skill declares no required environment variables or credentials, which is plausible for a CLI-based workflow. However, the SKILL.md claims integration with third-party services ('Fliggy') and performs operations that typically require accounts/credentials; the absence of any declared credential requirements or guidance about how the CLI authenticates is a gap that should be explained before use.
Persistence & Privilege
The skill does not request 'always: true', does not declare modifications to other skills or system-wide settings, and has no install-time files in the bundle. It does instruct installing a global npm package at runtime, which affects the system but is a normal CLI dependency rather than hidden persistent privileges.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install spring-break-flight - After installation, invoke the skill by name or use
/spring-break-flight - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Removed internal reference files: fallbacks.md, playbooks.md, runbook.md, templates.md.
- All reference links in documentation retained, but underlying files are no longer present in the skill package.
- No changes to functionality, CLI, parameters, or output rules.
- The skill continues to guide usage, but reference materials for scenarios, templates, and failure recovery have been removed.
v3.2.0
Spring-break-flight v3.2.0 changelog:
- Expanded supported travel services: hotel reservation, train tickets, attraction tickets, itinerary planning, visa info, travel insurance, and car rental now included.
- Updated critical execution rules to strictly require CLI-based results; non-CLI/training data answers are explicitly forbidden.
- Added comprehensive parameter mapping and clear playbooks for finding recommended, cheapest, fastest, and direct spring break flights.
- Clarified step-by-step workflow: strict environment check, user parameter collection, CLI execution, and output validation.
- Enhanced output instructions: booking links are mandatory for each result, and detailed formatting and brand requirements are specified.
- Broadened compatibility: now supports Claude Code, OpenClaw, Codex, QClaw, ArkClaw, and all SKILL.md-compatible agents.
Metadata
Frequently Asked Questions
What is spring-break-flight?
Book spring break flights for student vacations and spring holiday travel. Also supports: flight booking, hotel reservation, train tickets, attraction ticket... It is an AI Agent Skill for Claude Code / OpenClaw, with 45 downloads so far.
How do I install spring-break-flight?
Run "/install spring-break-flight" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is spring-break-flight free?
Yes, spring-break-flight is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does spring-break-flight support?
spring-break-flight is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created spring-break-flight?
It is built and maintained by dingtom336-gif (@dingtom336-gif); the current version is v1.0.0.
More Skills