← Back to Skills Marketplace
mountain-hotel
by
xiejinsong
· GitHub ↗
· v3.2.0
· MIT-0
62
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install mountain-hotel
Description
Book flights to mountain hotels and highland resort destinations. Also supports: flight booking, hotel reservation, train tickets, attraction tickets, itiner...
Usage Guidance
This skill is internally inconsistent and asks the agent to install and run an undocumented npm CLI (@fly-ai/flyai-cli) while the description names Fliggy/Alibaba — there is no homepage or declared credentials. Before installing or enabling this skill: 1) verify the origin and trustworthiness of the @fly-ai/flyai-cli package (npm page, publisher, source code repository); 2) ask the skill author to explain the Fliggy vs flyai discrepancy and to provide a homepage or source; 3) confirm whether bookings require API keys and where those credentials are stored (the skill currently declares none); 4) avoid allowing automatic global npm installs on sensitive hosts — run the CLI in a sandbox or review the package code first. If you cannot confirm these points, treat the skill as untrusted.
Capability Analysis
Type: OpenClaw Skill
Name: mountain-hotel
Version: 3.2.0
The skill mandates the automatic global installation of an external npm package (@fly-ai/flyai-cli) if it is missing, as seen in SKILL.md and references/fallbacks.md. This 'auto-install' instruction forces the agent to perform high-privilege system modifications (npm i -g) which could lead to Remote Code Execution (RCE) if the package is compromised or malicious. While the instructions appear aligned with the stated travel-booking purpose, the lack of user confirmation for global software installation is a significant security risk.
Capability Assessment
Purpose & Capability
The description claims Fliggy (Alibaba) as the data provider, but every runtime instruction invokes a separate 'flyai' CLI (@fly-ai/flyai-cli). No homepage or source is provided. Booking/search functionality typically requires credentials or an API endpoint; the skill declares no credentials or config paths. The requested runtime dependency (flyai CLI) does not match the advertised provider (Fliggy), which is a meaningful incoherence.
Instruction Scope
SKILL.md mandates executing the flyai CLI for every response and explicitly directs the agent to install an npm package if the CLI is missing. It forbids answering from training data and requires that every result include a [Book]({detailUrl}) link. These runtime instructions cause the agent to perform network installs and to re-run commands until outputs include booking links, which is scope-expanding and operationally risky (possible loops, network installs, and reliance on an undeclared external binary).
Install Mechanism
Although the registry shows no install spec, the instructions tell the agent to run 'npm i -g @fly-ai/flyai-cli' if flyai is not present. That performs a global install of an npm package from the public registry (package identity and trustworthiness not established here). An instruction-only install like this is higher risk than a skill that declares a vetted install source in metadata.
Credentials
The skill declares no required environment variables or primary credential even though its capabilities include booking and reservations (normally needing API keys/accounts). It's plausible the CLI handles auth interactively or via system config, but the absence of any declared credential requirement is inconsistent and could lead the CLI to request or reuse system credentials implicitly.
Persistence & Privilege
The skill does not request 'always: true' and does not modify other skills. However, its runtime behavior includes a global npm install which changes the host environment (adds a global binary). That is a persistent system change even though it doesn't alter agent config directly.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install mountain-hotel - After installation, invoke the skill by name or use
/mountain-hotel - Provide required inputs per the skill's parameter spec and get structured output
Version History
v3.2.0
- Major update: strict new execution rules and CLI-only answers.
- Only responds to flight/hotel queries using real-time data from the flyai CLI.
- Now requires CLI installation check before every search; never uses training data for answers.
- Output must always include booking links from live CLI responses.
- Improved language detection and stricter parameter handling—never invents values.
- Expanded supported travel features, including train tickets, car rentals, and visa info.
Metadata
Frequently Asked Questions
What is mountain-hotel?
Book flights to mountain hotels and highland resort destinations. Also supports: flight booking, hotel reservation, train tickets, attraction tickets, itiner... It is an AI Agent Skill for Claude Code / OpenClaw, with 62 downloads so far.
How do I install mountain-hotel?
Run "/install mountain-hotel" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is mountain-hotel free?
Yes, mountain-hotel is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does mountain-hotel support?
mountain-hotel is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created mountain-hotel?
It is built and maintained by xiejinsong (@xiejinsong); the current version is v3.2.0.
More Skills