机票/酒店/旅行降价监控助手

降价监控+自动下单。用户设置目标价和截止日期后，系统定时轮询飞猪价格，达标后通知或自动下单。Use when user mentions 降价监控, 价格提醒, 等降价, 盯盘, 自动下单, price drop tracking, deal monitoring for hotels/flights/trave...

Before installing or enabling this skill, get answers to these questions and take precautions: - Where do flyai / Fliggy credentials and payment methods come from? Who provides and stores them, and how are they protected? The skill should explicitly list required credentials and their storage location. - How does auto_book work in practice? Confirm whether the agent will ever place paid orders without an explicit, per-order confirmation. Prefer leaving auto_book=false and testing notification-only mode first. - How are cron jobs created, listed, and revoked (qoder_cron)? Verify you can audit and remove scheduled tasks easily and that they won't outlive your consent. - What safeguards exist against accidental purchases (rate limits, confirmations, 2-step authorization)? Ask for an explicit confirmation flow for every order, or require tokenized one-time payment approvals. - Test with low-risk examples: enable immediate notifications only, monitor a free or low-cost item, and verify the exact sequence of API calls, request parameters, and any use of stored credentials. If the publisher cannot clearly explain where credentials/payment data are obtained and how to revoke scheduled jobs or require confirmations, consider this skill too risky for auto-booking and use notification-only monitoring instead.

Type: OpenClaw Skill Name: price-drop-tracker Version: 1.0.0 The price-drop-tracker skill is designed to monitor travel product prices on Fliggy and optionally perform automated bookings. It utilizes platform-specific tools like 'flyai' for price searching and 'qoder_cron' for scheduling recurring checks. The execution logic in SKILL.md is transparently aligned with its stated purpose, and the high-risk 'auto_book' feature is documented as requiring explicit user authorization. No indicators of data exfiltration, unauthorized execution, or malicious prompt injection were found.