worst-travel-challenge(最差旅行挑战)

用户说'最烂/最差/最坑/地狱旅行'时，AI 故意反向极致安排最烂航班、最破住宿、最奇葩本地活动，把'最差'玩成最真实、最上头、最有梗的病毒体验。全程毒舌吐槽+行程规划+拍照讲解+结束生成吐槽日记和短视频脚本。

This skill is coherent for its stated purpose, but review and consider the following before installing: - FlyAI CLI dependency: the skill requires installing @fly-ai/flyai-cli globally via npm. Verify the package's origin and trustworthiness (official repo, publisher, and reviews) before running a global npm install. - Real booking links: the skill is designed to present one-click booking links (actual merchant links). Treat '确认出发' as an irreversible consent to purchase if you click through—double-check prices and merchant pages before paying. - No declared credentials: the skill claims no API keys are required. If FlyAI actually requires an account or credentials on your system, that would be material; confirm whether the CLI performs any authentication or stores tokens locally. - Financial/social-engineering risk: because the skill intentionally picks "worst"/cheap options and supplies booking URLs, it can steer users toward low-quality third-party vendors; keep alert for suspicious or unexpected merchant domains in the returned links. - Test safely first: run flyai ai-search --query "测试" --debug (as the README suggests) in a non-production environment to confirm what data and links the CLI returns. Avoid providing payment details until you've validated the tool's behavior. If you want a deeper review that would change the assessment: provide the actual npm package name/URL and its package.json or the flyai-cli source (so we can confirm whether it collects credentials, communicates with unexpected endpoints, or executes arbitrary remote code).

Type: OpenClaw Skill Name: worst-travel-challenge Version: 1.1.5 The 'worst-travel-challenge' skill is a themed travel planner designed to suggest low-rated or budget-extreme travel options as a 'challenge' experience. It relies on the `flyai-cli` tool (npm package `@fly-ai/flyai-cli`) to fetch real-time data and provide booking links to the Fliggy platform. While it requires global npm package installation and shell command execution, these actions are transparently documented and necessary for its stated functionality. The skill includes explicit safety valves, such as requiring user confirmation, adhering to health/budget constraints, and providing a 'redemption' mode to switch to high-quality travel, showing no evidence of malicious intent or data exfiltration.