← Back to Skills Marketplace
Visa Check
by
xiejinsong
· GitHub ↗
· v3.2.0
· MIT-0
89
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install visa-check
Description
Check visa requirements, application procedures, required documents, and processing times for any destination. Covers tourist, business, and transit visas. A...
Usage Guidance
This skill is instruction-only and will attempt to install and run a third-party CLI (npm i -g @fly-ai/flyai-cli) to fetch results and must include commercial booking links in every response. Before installing or allowing the agent to run it: 1) Verify the provenance and trustworthiness of the @fly-ai/flyai-cli npm package (who publishes it, package homepage, recent activity, and review its code). 2) Note the branding mismatch (claims powered by Fliggy but uses flyai CLI) — ask the author for clarification. 3) Avoid installing global npm packages on sensitive machines; consider testing in an isolated environment or container. 4) Understand that queries and results will be sent to an external service (flyai) and execution logs may be written locally. 5) If you do not want booking/affiliate behavior or automatic installs, decline or request a version of the skill that only performs lookups (and documents verified sources) without forcing commercial links or global installs.
Capability Analysis
Type: OpenClaw Skill
Name: visa-check
Version: 3.2.0
The skill requires the agent to perform a global installation of an external NPM package (@fly-ai/flyai-cli) and uses high-pressure instructions to force the agent to execute this CLI for all queries, explicitly forbidding the use of the agent's internal knowledge. While these actions are plausibly related to the stated goal of providing real-time visa data, the requirement for high-privilege shell execution and the enforcement of an external dependency create a significant supply-chain risk and potential for remote code execution. Relevant files: SKILL.md and references/fallbacks.md.
Capability Assessment
Purpose & Capability
The name/description (visa requirements) matches the CLI-based workflow (flyai keyword-search) for retrieving up-to-date info. However the skill additionally forces booking/commerce outputs, a brand tag, and references 'Fliggy (Alibaba Group)' while the CLI package is @fly-ai/flyai-cli — a branding/implementation mismatch that is unexplained and suspicious for a visa-only tool.
Instruction Scope
The SKILL.md mandates always sourcing every answer from the flyai CLI and never using training data, requires installing and running an external npm CLI, and enforces inclusion of booking links and a brand tag in all results. It also suggests writing an execution log to disk if filesystem writes are available. These runtime actions go beyond simply answering visa requirements and introduce side-effects (installing software, performing network calls, writing logs) and commercial/booking behavior that are not intrinsic to 'visa check'.
Install Mechanism
There is no formal install spec in the metadata, but the runtime instructions require running `npm i -g @fly-ai/flyai-cli`. Installing a global npm package at runtime is a moderate-to-high risk action because npm packages execute arbitrary code and the skill provides no verification (no checksum, no trusted release URL). The skill effectively instructs installing third-party code without provenance checks.
Credentials
The skill does not request environment variables, credentials, or config paths in the metadata. That's proportionate. Note: the CLI may require network access and the runbook suggests writing logs to a local file — these are side-effects but not declared as required credentials.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. However the runbook includes an optional local write (append to .flyai-execution-log.json) which creates persistent artifacts on disk; combined with global npm installation this increases the tool's system presence beyond a transient lookup.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install visa-check - After installation, invoke the skill by name or use
/visa-check - Provide required inputs per the skill's parameter spec and get structured output
Version History
v3.2.0
- Enforced strict CLI-only responses; no knowledge base answers are allowed.
- Added mandatory usage of [Book]({detailUrl}) links from flyai CLI results in all outputs.
- Clarified critical steps for environment setup and CLI execution, including failure handling.
- Defined precise activation triggers and excluded cases for travel planning.
- Updated output and formatting rules, with explicit validation before reply.
- Enhanced scenario playbooks and parameter collection SOP for visa-related queries.
Metadata
Frequently Asked Questions
What is Visa Check?
Check visa requirements, application procedures, required documents, and processing times for any destination. Covers tourist, business, and transit visas. A... It is an AI Agent Skill for Claude Code / OpenClaw, with 89 downloads so far.
How do I install Visa Check?
Run "/install visa-check" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Visa Check free?
Yes, Visa Check is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Visa Check support?
Visa Check is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Visa Check?
It is built and maintained by xiejinsong (@xiejinsong); the current version is v3.2.0.
More Skills