Travel CN

旅行信息查询 - 去哪儿/携程/飞猪数据查询（Expedia 中国版）

This is an instruction-only travel lookup skill that shows how to call partner APIs and how to scrape sites. Before installing or using it: (1) note that the SKILL.md refers to APIs (Ctrip) and services (12306) that usually require API keys or logins, but the skill doesn't declare or handle credentials — do not paste credentials into an untrusted skill. (2) The examples call for pip installing packages (selenium, py12306) and running a browser driver — review and vet any packages before installing. (3) The quick scripts referenced (./scripts/*.sh) are not included; don't execute unknown local scripts if you find them later. (4) Web scraping can violate site terms and may expose your IP/account; prefer official partner APIs and explicit credential handling. If you plan to use this, ask the author for: the missing scripts, explicit instructions on how to supply credentials safely (and what env vars to set), and assurances about legal/ToS compliance for scraping.

Type: OpenClaw Skill Name: travel-cn Version: 1.0.0 The skill is classified as suspicious due to its reliance on potentially risky capabilities, even though no direct malicious intent is evident. The `SKILL.md` file describes methods involving `pip install selenium` and `pip install py12306` for package installation, web scraping using Selenium, and the execution of local shell scripts (`./scripts/*.sh`). While these actions are presented as examples for the skill's stated purpose (travel information), they represent capabilities that, if not properly sandboxed or controlled by the AI agent's execution environment, could be exploited for unintended system access or resource consumption. There is no evidence of intentional data exfiltration, persistence, or malicious prompt injection.