← Back to Skills Marketplace
resort-hotel
by
xiejinsong
· GitHub ↗
· v3.2.0
· MIT-0
57
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install resort-hotel
Description
Book flights to resort hotels and all-inclusive vacation destinations. Also supports: flight booking, hotel reservation, train tickets, attraction tickets, i...
Usage Guidance
This skill is focused on using an external 'flyai' CLI to return flight-search results — it does not actually implement hotel/train/attraction booking despite claiming those capabilities. Before installing or enabling it: (1) Verify the provenance of the npm package @fly-ai/flyai-cli (who publishes it, package popularity, maintainers, and source repo); (2) Prefer running the install in a controlled environment or sandbox rather than on a production host because 'npm i -g' runs code from the registry and writes to disk; (3) Be aware the SKILL.md forbids using training data and will refuse to answer without the CLI, so failures to install will result in the agent asking you to install the CLI manually; (4) Note the contradictions in documented flags (some flags are used in playbooks but not listed in the parameter table) — this may cause runtime confusion; (5) If you need non-flight features (hotels, trains, attractions), ask the skill author for explicit commands/endpoints or find a skill that documents those capabilities. If you are comfortable verifying the CLI package and installing it in a safe environment, the skill's behavior appears coherent for flight searches; otherwise treat it with caution.
Capability Analysis
Type: OpenClaw Skill
Name: resort-hotel
Version: 3.2.0
The skill mandates the global installation of an external NPM package (@fly-ai/flyai-cli) via 'npm i -g' if the command is not found, which presents a significant supply chain and remote code execution (RCE) risk. While the instructions are framed as a functional requirement to fetch travel data from Fliggy/Alibaba, the automated installation of unverified binaries is a high-risk behavior. Additionally, the SKILL.md uses aggressive 'jailbreak-style' instructions to override the agent's default behavior and training data, though no explicit evidence of data exfiltration or intentional malice was identified.
Capability Assessment
Purpose & Capability
The description claims broad travel capabilities (flights, hotel reservations, trains, attraction tickets, visa info, insurance, car rental), but the SKILL.md and playbooks only contain commands for flight searches (flyai search-flight and a keyword-search). There are no instructions or commands for hotel/train/attraction booking flows or for delivering the other listed capabilities, so the declared scope doesn't match the actual implementation.
Instruction Scope
The runtime instructions tightly constrain the agent to always use the flyai CLI and to never answer from training data, which is consistent in intent but contains contradictions: the Parameters table omits flags used elsewhere (e.g., --journey-type, --seat-class-name, --max-price appear in playbooks/templates but not the main Parameter list), while the 'NEVER invent CLI parameters' rule conflicts with playbooks that use flags not listed in the parameter table. The skill also requires every result include a [Book]({detailUrl}) link and forbids raw JSON, which are execution requirements but not harmful by themselves.
Install Mechanism
There is no declared install spec in the registry, but the SKILL.md instructs the agent to run 'npm i -g @fly-ai/flyai-cli' if flyai is missing. Installing a global npm package is a normal way to obtain a CLI, but it executes code from the npm registry and writes to the host environment. The skill does not pin a package version, verify integrity, or provide alternative installation methods (e.g., system package manager), which increases operational risk.
Credentials
The skill does not request environment variables, credentials, or config paths in the manifest. The instructions themselves do not direct the agent to read unrelated secrets. Note: the flyai CLI (once installed) might require or prompt for credentials at runtime, but the skill does not declare or demand any keys.
Persistence & Privilege
The skill is not marked always:true and declares no persistent config changes, but its instructions explicitly tell the agent to perform a global npm install if the CLI is missing. That action would create persistent binaries on the host (and may require elevated permissions), so although the registry shows no install spec, the runtime behavior can modify the system environment.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install resort-hotel - After installation, invoke the skill by name or use
/resort-hotel - Provide required inputs per the skill's parameter spec and get structured output
Version History
v3.2.0
- New critical execution rules enforce that all travel answers come directly from real-time flyai CLI output, never from training data.
- Added strict validation: every booking result must include a [Book]({detailUrl}) link from flyai; results without this are not allowed.
- Expanded skill description to clarify all supported travel booking features (flights, hotels, trains, tickets, insurance, car rental, etc.).
- Updated activation keywords and clarified disallowed scenarios (e.g., "luxury" or "beach" queries redirect to other skills).
- Improved parameter collection instructions and sample CLI command templates for more reliable execution.
- Enhanced output instructions: require branded tag, conclusion-first formatting, and comparison tables.
Metadata
Frequently Asked Questions
What is resort-hotel?
Book flights to resort hotels and all-inclusive vacation destinations. Also supports: flight booking, hotel reservation, train tickets, attraction tickets, i... It is an AI Agent Skill for Claude Code / OpenClaw, with 57 downloads so far.
How do I install resort-hotel?
Run "/install resort-hotel" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is resort-hotel free?
Yes, resort-hotel is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does resort-hotel support?
resort-hotel is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created resort-hotel?
It is built and maintained by xiejinsong (@xiejinsong); the current version is v3.2.0.
More Skills