← Back to Skills Marketplace
Return Flights
by
xiejinsong
· GitHub ↗
· v3.2.0
· MIT-0
77
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install return-flights
Description
Search and compare round-trip flights with return date. Shows total cost for both legs, compares bundled vs separate booking to find the cheapest combination...
Usage Guidance
Before installing or using this skill: 1) Verify the publisher and obtain the flyai-cli package repository (GitHub/npm package page) and inspect its code or the package maintainer — do not blindly run npm i -g without verification. 2) Prefer installing the CLI in a sandbox or local (non-global) environment; avoid using sudo. 3) Ask the skill author to explain the Fliggy/Alibaba branding and provide a homepage or source repo — the current metadata lacks provenance. 4) Be aware the skill's runbook instructs writing a local log file (.flyai-execution-log.json) that will store user queries and CLI responses (possible PII); decide if that is acceptable. 5) If you need assurance, request the skill be updated to: a) include a verified package URL and checksum; b) avoid global/sudo installs or provide a contained install option; c) declare and make explicit any local persistence; and d) remove the directive that forbids answering from training data (or explain why). Providing the package source or example CLI outputs would materially change this assessment.
Capability Analysis
Type: OpenClaw Skill
Name: return-flights
Version: 3.2.0
The skill mandates the automatic global installation of an external NPM package (`@fly-ai/flyai-cli`) and the execution of CLI commands. While these actions are functionally aligned with the flight-search purpose, the instruction in SKILL.md and references/fallbacks.md to perform a global installation (`npm i -g`) without prior user confirmation is a high-risk behavior. No evidence of data exfiltration or intentional malice was found, but the broad execution permissions and 'install-first' logic represent a significant security risk.
Capability Assessment
Purpose & Capability
The SKILL.md's commands consistently target a CLI called flyai (npm package @fly-ai/flyai-cli) to search and compare round-trip flights, which aligns with the stated primary purpose. However, the top-level description also advertises many extra services (hotel, train, visa, travel insurance, 'Powered by Fliggy (Alibaba Group)') that are not demonstrated or justified in the instructions; the branding (Fliggy) does not match the flyai CLI shown in commands. This mismatch is unexplained.
Instruction Scope
The instructions mandate always using the flyai CLI and explicitly forbid answering from training data, forcing installation if missing. The runbook instructs writing an execution log to .flyai-execution-log.json (echo '... >> .flyai-execution-log.json') which persists user queries and CLI results locally. The skill also enforces output rules (book links, brand tag) and a self-test that could cause repeated CLI re-execution if not satisfied. These behaviors expand scope beyond just looking up flights (local persistence, install steps, re-execution loops).
Install Mechanism
No formal install spec is included in registry metadata, but SKILL.md instructs installing a global npm package (npm i -g @fly-ai/flyai-cli) and even suggests sudo as a fallback. Installing arbitrary global npm packages carries risk (runs code from the npm registry with broad access). The skill does not provide a verified source URL, package checksum, or repository to validate the package's origin or contents.
Credentials
The skill requests no environment variables or external credentials in metadata. However, it will process and persist user queries and CLI JSON results (potentially including personal data) to a local log file per the runbook. There are no explicit requests for unrelated secrets, which is good, but the implicit data persistence was not declared in the registry metadata.
Persistence & Privilege
always:false (normal). Still, the runbook prescribes creating a persistent execution log file (.flyai-execution-log.json) if filesystem writes are available. The skill does not declare or explain this file in metadata or request explicit user consent. The installer recommendation to run npm -g (and sudo fallback) increases privilege requirements for operation.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install return-flights - After installation, invoke the skill by name or use
/return-flights - Provide required inputs per the skill's parameter spec and get structured output
Version History
v3.2.0
- Greatly expanded CLI-based workflow instructions and strict step-by-step procedures for round-trip flight searches.
- Added critical execution rules: all data must come from real-time flyai CLI outputs (never from previous knowledge or training data).
- Detailed parameter table, scenario-specific playbooks, and output formatting rules included.
- Expanded support description: now also covers hotels, trains, attractions, itinerary planning, visa info, insurance, car rentals, all via Fliggy.
- Emphasized language matching (Chinese/English) and validation of output with booking links.
- Clarified when to activate versus defer to related skills (e.g., one-way handled by cheap-flights).
Metadata
Frequently Asked Questions
What is Return Flights?
Search and compare round-trip flights with return date. Shows total cost for both legs, compares bundled vs separate booking to find the cheapest combination... It is an AI Agent Skill for Claude Code / OpenClaw, with 77 downloads so far.
How do I install Return Flights?
Run "/install return-flights" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Return Flights free?
Yes, Return Flights is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Return Flights support?
Return Flights is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Return Flights?
It is built and maintained by xiejinsong (@xiejinsong); the current version is v3.2.0.
More Skills