分贝通旅行

一站式企业差旅服务，提供酒店搜索预订、机票查询预订、改期退票等全流程服务。智能需求确认、后台静默认证、表格对比展示。基于分贝通官方数据，实时准确可靠。

This skill appears to implement the travel functionality it advertises, but review these points before installing or using it with real accounts: - PII persistence and logging: The code writes auth tokens (~/.fbt-auth.json / ~/.fbt_auth.json) and price caches (~/.fbt_price_cache.json) to your home directory and prints passenger name/phone/ID to stdout in some scripts. This contradicts the SKILL.md statement that passenger info is not logged. If you care about privacy, inspect file locations and file permissions and consider running in an isolated environment. - Hard-coded token: hotel_api.py contains a DEFAULT_ACCESS_TOKEN constant. Treat hard-coded secrets as risky — confirm whether it's a harmless test token and rotate or remove it if you plan to use a real account. - Shell execution risk: travel_api.py uses os.system with joined arguments. If untrusted input can reach those commands, shell injection is possible. Prefer subprocess with argument lists or sanitize inputs. - Network endpoints: the code talks to app-gate.fenbeitong.com (matches the vendor name). If you do not trust the source, do not allow the skill network access or run it behind network monitoring. - Mitigations: run the skill in a sandboxed environment or container, inspect and remove hard-coded secrets, set strict file permissions on created files, and review/modify code to avoid os.system and to avoid printing PII. If you cannot audit the code, treat it as untrusted and avoid supplying real passenger credentials or corporate accounts.

Type: OpenClaw Skill Name: travels Version: 2.4.1 The skill bundle contains several significant security vulnerabilities, although no clear evidence of intentional malice was found. Key issues include the explicit disabling of SSL certificate verification in `scripts/common.py` (using `ssl._create_unverified_context`), which exposes the agent to Man-in-the-Middle (MITM) attacks, and a potential shell injection vulnerability in `scripts/travel_api.py` where `os.system` is used with unsanitized command-line arguments. Additionally, `scripts/hotel_api.py` contains a hardcoded `DEFAULT_ACCESS_TOKEN`. While these are critical flaws, they appear to be poor security practices rather than intentional malware designed for exfiltration or persistence.