Variflight

Query flight information, train tickets, and travel data using Variflight (飞常准) HTTP API. Use when the user needs to (1) search flights by route or flight number, (2) check flight status and punctuality, (3) find train tickets, (4) get airport weather forecasts, (5) check flight prices, (6) plan multi-modal trips (flight+train), or (7) get flight comfort metrics (happiness index).

Install only if you intend to use Variflight and are comfortable sending travel queries to its API. Prefer a protected environment variable or secret manager for VARIFLIGHT_API_KEY, avoid passing the key on the command line, do not commit config files containing the key, set restrictive permissions on local key files, and do not bake live keys into Docker images or shared settings.

Type: OpenClaw Skill Name: variflight Version: 1.0.1 The OpenClaw AgentSkills skill bundle is benign. All shell scripts act as wrappers, safely passing arguments to the `variflight.py` Python script. The Python script correctly parses arguments, loads API keys from expected locations, and then securely serializes all user-provided parameters into a JSON body before making an HTTP POST request to a hardcoded, legitimate Variflight API endpoint (`https://ai.variflight.com/api/v1/mcp/data`) using `urllib.request`. There is no evidence of prompt injection in `SKILL.md` or `README.md`, no data exfiltration, no malicious execution (e.g., `eval`, `os.system`, `curl|bash`), and no attempts at persistence or obfuscation.