← Back to Skills Marketplace
meituan-travel
by
meituan-travel-ai
· GitHub ↗
· v1.0.8
· MIT-0
204
Downloads
2
Stars
0
Active Installs
8
Versions
Install in OpenClaw
/install meituan-travel
Description
美团酒旅官方 Skill，您的专属 AI 旅行管家。酒店、机票、火车票、景点门票、度假一站搞定，还能帮你找优惠、比价格、定行程。美团海量真实点评加持，出行每一步都更放心。
Usage Guidance
This looks like an authentic CLI-wrapper skill for Meituan travel and mostly coherent. Before installing or enabling it: 1) Verify the npm package @meituan-travel/ht-ai is the official publisher (publisher/org, package page, and source) so npx won't execute untrusted code. 2) Provide only a minimally-scoped MEITUAN_HT_TOKEN (confirm scope, billing/quota) and avoid making MEITUAN_RAW_JSON an always-set secret unless you need raw JSON output. 3) Confirm your platform enforces non-logging of environment secrets (the SKILL.md requests this but cannot enforce it). 4) If you run this in an automated agent, consider rate limits and restrict automatic invocation to travel-related intents. These checks will reduce risk while using the skill.
Capability Analysis
Type: OpenClaw Skill
Name: meituan-travel
Version: 1.0.8
The skill is a legitimate integration for Meituan Travel services, utilizing a scoped npm package (@meituan-travel/ht-ai) and a verified Meituan developer endpoint. It demonstrates good security practices by instructing the AI agent to perform shell-safe escaping on user input and explicitly forbidding the logging or echoing of the sensitive MEITUAN_HT_TOKEN. No indicators of data exfiltration, persistence, or malicious intent were identified.
Capability Assessment
Purpose & Capability
Name/description match the runtime instructions: the SKILL.md tells the agent to call the @meituan-travel/ht-ai CLI (via npx or global install) to query Meituan travel data. Required binary (npx) and MEITUAN_HT_TOKEN align with the described purpose. Minor inconsistency: the registry summary above shows "Primary credential: none" while the skill metadata and SKILL.md declare MEITUAN_HT_TOKEN as the primary credential — this is likely an authoring/metadata mismatch, not a functional red flag.
Instruction Scope
SKILL.md only instructs running the ht-ai CLI, escaping user single quotes for shell safety, reading the declared MEITUAN_HT_TOKEN env var, and formatting results. It does not ask to read unrelated files or other system credentials. It explicitly warns not to print the token. Note: the guidance cannot by itself enforce non-logging — platform/runtime must honor it.
Install Mechanism
No install spec (instruction-only), which keeps on-disk footprint low. However runtime use of `npx @meituan-travel/ht-ai` means remote package code will be fetched/executed at call time (or the user can install globally). Verify the npm package identity and publisher (official Meituan package) before allowing runtime npx downloads.
Credentials
Requesting MEITUAN_HT_TOKEN is proportionate and expected. The declared required env list also includes MEITUAN_RAW_JSON, but SKILL.md treats MEITUAN_RAW_JSON as an optional flag to request raw JSON output — it does not need to be mandatory. Recommend the registry declare only MEITUAN_HT_TOKEN as required and treat MEITUAN_RAW_JSON as optional. Ensure the token's scope is minimal (only the APIs needed) before providing it.
Persistence & Privilege
always:false (default) and no install spec — the skill does not request permanent inclusion or write access. Metadata indicates runtime context_isolation: execution and parent_context_access: read-only, which limits privilege. No instructions try to change other skills or system-wide settings.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install meituan-travel - After installation, invoke the skill by name or use
/meituan-travel - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.8
- 增加了用户 query 的 shell 安全转义说明，明确将单引号 `'` 替换为 `'\''` 以避免特殊字符导致的 CLI 命令问题。
- 补充了执行流程，新增“参数清理”步骤，提升系统安全性和稳定性。
- 其他内容保持不变。
v1.0.7
- 更新了 homepage 链接为 https://developer.meituan.com
- metadata 中增加了 primary 字段（MEITUAN_HT_TOKEN）
- 移除了 bins 里的 ht-ai，仅保留 npx
- 其余描述内容无重大调整
v1.0.6
- 新增 homepage 字段，提供官方开发者平台链接。
- 优化环境变量 requires 格式，明确 MEITUAN_HT_TOKEN 的 primary 属性。
- 其余内容保持不变，无功能或用户接口上的改动。
v1.0.5
- 增加了对本地 ht-ai 可执行文件的支持，允许直接用 ht-ai 调用核心 API（原先仅支持 npx）。
- 调整了依赖声明，新增 bins 字段支持 ht-ai。
- 其他功能与说明保持不变。
v1.0.4
- 优化 SKILL.md，调整 display_name 展示和部分描述内容，使功能介绍更直观易懂
- 更新执行指令推荐，优先引导使用全局安装的 ht-ai 命令
- 增加代理元数据，声明 agent 类型、运行时与上下文隔离要求
- 其余功能与核心执行逻辑保持不变
v1.0.3
Solving the risk detection problem
v1.0.2
**Meituan Travel Skill 1.0.2 Update Notes**
- Fully upgraded to the officially recommended Skill, providing one-stop access to hotel, flight, train ticket, attraction ticket, and vacation bookings.
- Authentication and authorization mechanism adjustments: Tokens are now configured using environment variables (MEITUAN_HT_TOKEN), eliminating the need for local writing, plaintext transmission, or persistence, thus improving security.
- Command line call optimization: Direct querying using `npx` is now uniformly recommended, supporting the latest version capabilities.
- Simplified output specifications: Maintaining a zero-reduction principle, transmitting all data (including links, images, and prices) as is; links are retained when the terminal does not support images, and discarding them is prohibited.
- Error handling and applicable scenario optimization: Added guidance on handling exit codes (especially exit 3 for authentication failure), with scenario boundary descriptions more focused on travel-related aspects.
- Documentation and security instructions updates: Added risk warnings regarding official interfaces, billing, and third-party content, clarifying token security precautions.
v1.0.0
meituan-travel v1.0.0
- 首个版本发布，提供基于美团酒旅的全链路旅行服务查询能力。
- 支持酒店、机票、火车票、景点门票、度假等一站式查询与预订。
- 实现灵活的 Token 鉴权管理与失效处理流程。
- 严格制定并规范输出格式，确保信息完整、图片链接合规展示。
- 明确使用范围，排除非旅行相关业务及出境服务指引。
- 提供可靠的错误处理和用户引导。
Metadata
Frequently Asked Questions
What is meituan-travel?
美团酒旅官方 Skill，您的专属 AI 旅行管家。酒店、机票、火车票、景点门票、度假一站搞定，还能帮你找优惠、比价格、定行程。美团海量真实点评加持，出行每一步都更放心。 It is an AI Agent Skill for Claude Code / OpenClaw, with 204 downloads so far.
How do I install meituan-travel?
Run "/install meituan-travel" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is meituan-travel free?
Yes, meituan-travel is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does meituan-travel support?
meituan-travel is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created meituan-travel?
It is built and maintained by meituan-travel-ai (@meituan-travel-ai); the current version is v1.0.8.
More Skills