← Back to Skills Marketplace
Travel Insurance
by
dingtom336-gif
· GitHub ↗
· v3.2.0
· MIT-0
66
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install travel-insurance
Description
Find and compare travel insurance plans — medical coverage, trip cancellation, luggage protection, and emergency evacuation for worry-free travel. Also suppo...
Usage Guidance
This skill is suspicious but not clearly malicious. Before installing or running it: 1) Ask the publisher to explain the mismatch between 'Fliggy (Alibaba Group)' and the required 'flyai' CLI and provide a verifiable homepage or repo. 2) Do NOT run 'npm i -g @fly-ai/flyai-cli' until you verify the npm package owner and inspect the package contents (check npmjs.com and the package's repository). 3) Confirm whether the agent will write logs to .flyai-execution-log.json and what data will be stored; if you care about privacy, run the skill in a sandbox or container, or request a mode that disables persistent logging. 4) If you still want to proceed, test the CLI manually first in an isolated environment and verify that returned results are safe and that detailUrl links point to expected booking endpoints. If the publisher cannot clarify the backend/provider and logging behavior, avoid installing the skill.
Capability Analysis
Type: OpenClaw Skill
Name: travel-insurance
Version: 3.2.0
The skill requires the agent to perform a global installation of an external NPM package (@fly-ai/flyai-cli) and execute CLI commands based on user-provided queries. While these actions are consistent with the stated purpose of providing real-time travel insurance data, the automated installation of global packages and the execution of shell commands represent a significant security risk and a potential vector for supply chain attacks or command injection. Key files: SKILL.md and references/fallbacks.md.
Capability Assessment
Purpose & Capability
The skill claims to be 'powered by Fliggy (Alibaba Group)' but the runtime enforces use of an npm package @fly-ai/flyai-cli (flyai). That mismatch between claimed backend and required tooling is incoherent. Requiring a third-party CLI to answer travel-insurance queries is plausible, but the identity of the provider is unclear and there is no homepage or source to verify the provider.
Instruction Scope
SKILL.md forces all answers to come from the flyai CLI output and prohibits using training data; it also includes a runbook that conditionally writes execution logs to .flyai-execution-log.json. The log schema may include user_query and CLI commands/results — writing these to disk is not declared in the skill metadata and could expose user data or create persistent artifacts. The instructions also enforce strict formatting rules (every result must include a [Book]({detailUrl}) link) which may cause repeated retries or unnecessary CLI calls if results lack that field.
Install Mechanism
There is no formal install spec in the registry, but the instructions require running 'npm i -g @fly-ai/flyai-cli'. Global npm installs are a moderate-risk action because they fetch code from the public registry and add executables to the host. The package and publisher cannot be verified from the skill metadata (no homepage/source provided).
Credentials
The skill does not request environment variables, credentials, or config paths, which is proportionate to a read-only search/compare operation. However, the runbook's optional file write introduces filesystem persistence that wasn't declared and could store sensitive inputs.
Persistence & Privilege
The skill is not force-installed (always:false) and does not request elevated platform privileges, which is good. However, it instructs (conditionally) persistent logging to a local file (.flyai-execution-log.json). That creates persistent artifacts that are not declared in the skill metadata and could persist sensitive queries or CLI results.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install travel-insurance - After installation, invoke the skill by name or use
/travel-insurance - Provide required inputs per the skill's parameter spec and get structured output
Version History
v3.2.0
travel-insurance 3.2.0 changelog
- Expanded skill description to clearly show support for additional travel services (flights, hotels, tickets, etc. via Fliggy).
- Added strict, critical execution rules to ensure all outputs are sourced from the flyai CLI; forbids knowledge-based answers.
- Clarified CLI installation and fallback handling for consistent error recovery.
- Enforced output requirements: mandatory booking links, brand tag, and Markdown formatting.
- Updated prerequisites, parameter collection SOP, and reference documentation links for improved usability and compliance.
Metadata
Frequently Asked Questions
What is Travel Insurance?
Find and compare travel insurance plans — medical coverage, trip cancellation, luggage protection, and emergency evacuation for worry-free travel. Also suppo... It is an AI Agent Skill for Claude Code / OpenClaw, with 66 downloads so far.
How do I install Travel Insurance?
Run "/install travel-insurance" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Travel Insurance free?
Yes, Travel Insurance is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Travel Insurance support?
Travel Insurance is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Travel Insurance?
It is built and maintained by dingtom336-gif (@dingtom336-gif); the current version is v3.2.0.
More Skills