← Back to Skills Marketplace
Book Hotels with Hot Spring Baths — Onsen Pools, Private Hot Spring Rooms, Ryokan Stays
by
xiejinsong
· GitHub ↗
· v3.2.0
· MIT-0
72
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install spring-hotel
Description
Find and book hotels with hot spring baths — onsen pools, private hot spring rooms, ryokan stays, thermal spa resorts. Also supports: flight booking, hotel r...
Usage Guidance
This skill relies entirely on installing and running a third‑party npm CLI (@fly-ai/flyai-cli) at runtime and may write persistent logs of your queries to disk. Before installing or enabling it: 1) Verify the npm package and its publisher (inspect the package on npmjs.org or its repository) and confirm it’s the official Fliggy/authorized client; 2) Ask the skill author for a homepage, source repo, and details on where booking credentials are stored and how authentication is handled; 3) If you must test it, run the CLI installation in a sandboxed environment or VM and inspect what files/configs it creates; 4) Ensure you are comfortable with the skill writing .flyai-execution-log.json containing your queries and results or ask for an option to disable local logging. If you cannot verify the CLI publisher or don't want a runtime global npm install and persistent logs, do not enable the skill.
Capability Analysis
Type: OpenClaw Skill
Name: spring-hotel
Version: 3.2.0
The skill mandates the global installation of an external NPM package (`npm i -g @fly-ai/flyai-cli`) and requires the agent to execute shell commands to function. While these actions are consistent with the stated goal of a CLI-based hotel search tool, the requirement for high-privilege installation and the use of aggressive prompt-engineering in `SKILL.md` to override agent safeguards (e.g., 'CRITICAL EXECUTION RULES') pose a significant supply chain risk. The skill also attempts to write logs to the local filesystem in `references/runbook.md` (`.flyai-execution-log.json`).
Capability Assessment
Purpose & Capability
The skill's stated purpose (finding and booking onsen hotels) matches the CLI commands it instructs (flyai search-hotel / search-poi). However, it depends entirely on an external CLI (@fly-ai/flyai-cli) that is not bundled, has no registry homepage provided, and the skill does not declare how the CLI will authenticate to the claimed provider (Fliggy). Requiring a third-party CLI is reasonable for live booking, but the lack of declared credential requirements or vendor/source information is a notable gap.
Instruction Scope
SKILL.md instructs the agent to install and run an external CLI, run many flyai commands, and persist a run log file (.flyai-execution-log.json) if filesystem writes are available. The runbook stores user queries and command output in the log. Instructions also force strict runtime behavior (never answer from training data, always include booking links). The filesystem logging of raw user_query and CLI results can expose user data on disk; the skill’s instructions give the agent authority to install and execute external code and to write persistent logs without describing retention or access controls.
Install Mechanism
There is no install spec in the registry; instead SKILL.md mandates running npm i -g @fly-ai/flyai-cli at runtime if the CLI is missing. Installing an arbitrary global npm package at runtime is moderate-to-high risk: it pulls remote code that will run on the host, may require elevated privileges, and the package source/maintainer is not validated in the skill files (no homepage, no source). This is an instruction-only skill that nevertheless causes the agent to perform a network install, increasing attack surface.
Credentials
The skill declares no required environment variables or credentials, yet it expects to perform bookings 'powered by Fliggy'. It does not explain where credentials come from (CLI interactive login, local config, or implicit tokens). The runbook also logs user_query and CLI commands/results locally, which is a form of data persistence/exposure not reflected in the declared requirements. The absence of declared auth requirements combined with necessary remote API access is a proportionality and transparency concern.
Persistence & Privilege
The skill will persist an execution log to .flyai-execution-log.json if filesystem writes are available, storing user_query and CLI results. While the skill is not marked always:true, it still requests persistent local logging and can install and run external code. Persistent logs of user inputs and commands increase privacy risk and the blast radius of any compromised CLI.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install spring-hotel - After installation, invoke the skill by name or use
/spring-hotel - Provide required inputs per the skill's parameter spec and get structured output
Version History
v3.2.0
Renamed and optimized
Metadata
Frequently Asked Questions
What is Book Hotels with Hot Spring Baths — Onsen Pools, Private Hot Spring Rooms, Ryokan Stays?
Find and book hotels with hot spring baths — onsen pools, private hot spring rooms, ryokan stays, thermal spa resorts. Also supports: flight booking, hotel r... It is an AI Agent Skill for Claude Code / OpenClaw, with 72 downloads so far.
How do I install Book Hotels with Hot Spring Baths — Onsen Pools, Private Hot Spring Rooms, Ryokan Stays?
Run "/install spring-hotel" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Book Hotels with Hot Spring Baths — Onsen Pools, Private Hot Spring Rooms, Ryokan Stays free?
Yes, Book Hotels with Hot Spring Baths — Onsen Pools, Private Hot Spring Rooms, Ryokan Stays is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Book Hotels with Hot Spring Baths — Onsen Pools, Private Hot Spring Rooms, Ryokan Stays support?
Book Hotels with Hot Spring Baths — Onsen Pools, Private Hot Spring Rooms, Ryokan Stays is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Book Hotels with Hot Spring Baths — Onsen Pools, Private Hot Spring Rooms, Ryokan Stays?
It is built and maintained by xiejinsong (@xiejinsong); the current version is v3.2.0.
More Skills