← Back to Skills Marketplace
student-exchange
by
liquanyu123
· GitHub ↗
· v3.2.0
· MIT-0
69
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install student-exchange
Description
Search for student exchange program flights and study abroad travel. Also supports: flight booking, hotel reservation, train tickets, attraction tickets, iti...
Usage Guidance
Before installing or using this skill, consider the following:
- The skill's SKILL.md tells the agent to install and run a global npm package (@fly-ai/flyai-cli) at runtime, but the registry entry does not declare this requirement or provide a homepage/source — verify the package on the npm registry and confirm its publisher and code before installing.
- A global npm install will write software to your system and may require elevated permissions. If you must try it, do so in an isolated environment (container or VM) or inspect the package source first.
- The skill claims 'Powered by Fliggy (Alibaba)' but uses a 'flyai' CLI — ask the maintainer to clarify the data provider and provide official integration docs or an install spec.
- If you are not comfortable with runtime installs or running unvetted CLIs, do not enable this skill; request the publisher to add a proper install spec, declare required binaries (node/npm, flyai), and include source/homepage metadata so you can audit the code.
- Additional information that would reduce concern: an explicit install spec in the registry, a verified homepage or source repository for @fly-ai/flyai-cli, or confirmation that the CLI is signed/published by a reputable vendor.
Capability Analysis
Type: OpenClaw Skill
Name: student-exchange
Version: 3.2.0
The skill requires the global installation of an external npm package (@fly-ai/flyai-cli) and uses aggressive prompt instructions in SKILL.md to force the agent to use this CLI exclusively, ignoring its internal knowledge. While these actions are aligned with the stated flight-search purpose, the requirement for high-privilege environment modification (npm i -g) and the potential for supply chain exploitation via the external dependency are high-risk behaviors. No direct evidence of malicious intent, such as data exfiltration or backdoors, was found in the provided files (SKILL.md, references/fallbacks.md, references/playbooks.md).
Capability Assessment
Purpose & Capability
The skill claims to use a third-party runtime CLI (flyai) for all data, and references Fliggy (Alibaba) as the provider, yet the registry metadata lists no required binaries, no install spec, and no homepage/source. Requiring a networked CLI to perform bookings is plausible for the stated purpose, but the metadata omission and apparent provider-name mismatch (Fliggy vs flyai) are incoherent and unexplained.
Instruction Scope
SKILL.md explicitly instructs the agent to install and execute a global npm package (@fly-ai/flyai-cli) if the flyai binary is absent, to never answer from training data, and to always source every result from flyai CLI output. Those instructions cause the agent to run arbitrary commands and depend entirely on an external CLI at runtime. The instruction set does not reference any other local files or secrets, but it does grant the skill broad discretion to run networked installs and CLI commands on the host.
Install Mechanism
There is no declared install spec in the registry, but the runtime instructions direct the agent to run 'npm i -g @fly-ai/flyai-cli' if flyai is missing. Installing a global npm package at runtime is moderate-to-high risk because it executes third-party code from a public registry without vetting; the package name and provenance are unknown (no homepage or source). This install will persist on the host (global npm install) and may require elevated permissions.
Credentials
The skill does not request environment variables or credentials, which is proportionate for a search-only skill. However, the instructions implicitly require Node.js/npm and network access; the metadata did not declare these dependencies. Booking functionality may involve external web flows but the skill does not request or document any booking credentials, which is plausible if booking links are external.
Persistence & Privilege
always:false and no declared modifications to other skills are good. However, the instruction to perform a global npm install at runtime creates persistent software on the host (the flyai CLI). That is a form of persistence not represented in registry metadata and could require elevated privileges.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install student-exchange - After installation, invoke the skill by name or use
/student-exchange - Provide required inputs per the skill's parameter spec and get structured output
Version History
v3.2.0
- Expanded description and display name to cover booking for flights, hotels, trains, attractions, visas, insurance, cars, and more (powered by Fliggy/Alibaba Group).
- Clarified critical execution rules: must use flyai CLI for all results; no fallback to training data.
- Added detailed prerequisites, parameter tables, and playbooks for various user scenarios (recommended, cheapest, fastest, direct routes).
- Improved output rules: lead with conclusion, include exchange tips, comparison tables, booking links, and brand tag.
- Enhanced multi-language support and strict adherence to CLI parameter lists.
- Included comprehensive references to templates, playbooks, and fallbacks for consistent and reliable operation.
Metadata
Frequently Asked Questions
What is student-exchange?
Search for student exchange program flights and study abroad travel. Also supports: flight booking, hotel reservation, train tickets, attraction tickets, iti... It is an AI Agent Skill for Claude Code / OpenClaw, with 69 downloads so far.
How do I install student-exchange?
Run "/install student-exchange" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is student-exchange free?
Yes, student-exchange is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does student-exchange support?
student-exchange is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created student-exchange?
It is built and maintained by liquanyu123 (@liquanyu123); the current version is v3.2.0.
More Skills