← Back to Skills Marketplace
Zoo Aquarium
by
xiejinsong
· GitHub ↗
· v3.2.0
· MIT-0
103
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install zoo-aquarium
Description
Find zoos, aquariums, safari parks, and wildlife sanctuaries. Great for families and animal lovers. Also supports: flight booking, hotel reservation, train t...
Usage Guidance
Proceed with caution. Key concerns: (1) The skill claims to be ‘powered by Fliggy’ but instructs use of a different CLI (@fly-ai/flyai-cli) — ask the publisher for the authoritative source and repository URL. (2) The SKILL.md requires installing a global npm package without a supplied homepage or repo; do NOT install a global package you cannot inspect. If you test, do so in an isolated environment (container/VM) and audit the package source before installing. (3) The skill may write an execution log containing raw user queries to .flyai-execution-log.json — this can capture sensitive input. Confirm whether logs are retained, where they are stored, and how they are protected. (4) Ask the author to provide: the CLI repository URL, package integrity info (checksum or signed release), explicit documentation for all claimed features (flights/hotels/visa), and a privacy statement for logs. If these are not provided, avoid installing the skill or run it only in a sandboxed environment.
Capability Analysis
Type: OpenClaw Skill
Name: zoo-aquarium
Version: 3.2.0
The skill bundle mandates the global installation and execution of a third-party NPM package (@fly-ai/flyai-cli) as a prerequisite for any functionality, which is a high-risk behavior. The instructions in SKILL.md and references/fallbacks.md use aggressive prompt engineering to force the agent to install this package and forbid the use of internal knowledge, effectively mandating shell execution. While these actions are plausibly related to the stated travel search purpose, the requirement for high-privilege global installation and the strict execution rules represent a significant supply-chain risk.
Capability Assessment
Purpose & Capability
The skill description claims it's “powered by Fliggy (Alibaba Group)” and advertises broad travel features (flights, hotels, visas), but the runtime instructions exclusively call a third-party CLI named @fly-ai/flyai-cli and only document attraction/POI searches. The advertised provider (Fliggy) does not match the CLI referenced (flyai), and the claimed capabilities (booking flights/hotels/visas) are not supported or documented in the playbooks — this is an unexplained mismatch.
Instruction Scope
SKILL.md forces the agent to obtain all data exclusively via the flyai CLI and forbids using training data. It also includes internal runbook instructions that may write an execution log (.flyai-execution-log.json) containing raw user queries and commands. The instructions therefore expand the agent's runtime behavior (global npm install, CLI execution, potential file writes) beyond a simple read-only query skill.
Install Mechanism
There is no install spec in the registry metadata, but the SKILL.md mandates installing a global npm package (npm i -g @fly-ai/flyai-cli) if the CLI is missing. Installing a global npm package from an unverified source is moderate-to-high risk because the package code cannot be inspected via the registry metadata. The skill gives no repository URL, official vendor domain, or cryptographic verification for that package.
Credentials
The skill does not request credentials or environment variables (proportionate), which is good. However, its runbook suggests logging full request data (raw user_query) to disk if writable. Persisting queries may capture PII or sensitive user input — a privacy risk not disclosed in the manifest. No explicit network exfiltration patterns are present in SKILL.md, but the external CLI will perform network calls whose behavior is unknown.
Persistence & Privilege
The skill does not request elevated platform privileges and is not always-enabled. It does, however, instruct the agent to persist execution logs to a local file when possible which gives it a modest persistence footprint in the working directory. It does not request or modify other skills' configurations.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install zoo-aquarium - After installation, invoke the skill by name or use
/zoo-aquarium - Provide required inputs per the skill's parameter spec and get structured output
Version History
v3.2.0
- Expanded skill to support itinerary planning, visa info, travel insurance, car rental, and more in addition to zoos and aquariums, powered by Fliggy (Alibaba Group).
- Enhanced critical execution rules: CLI output is now mandatory, and every response must include a `[Book]({detailUrl})` link.
- Updated activation and parameter instructions for improved accuracy and user experience.
- Added language-adaptive output; now responds in Chinese or English according to user input.
- Improved error handling and self-test procedures for CLI availability.
Metadata
Frequently Asked Questions
What is Zoo Aquarium?
Find zoos, aquariums, safari parks, and wildlife sanctuaries. Great for families and animal lovers. Also supports: flight booking, hotel reservation, train t... It is an AI Agent Skill for Claude Code / OpenClaw, with 103 downloads so far.
How do I install Zoo Aquarium?
Run "/install zoo-aquarium" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Zoo Aquarium free?
Yes, Zoo Aquarium is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Zoo Aquarium support?
Zoo Aquarium is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Zoo Aquarium?
It is built and maintained by xiejinsong (@xiejinsong); the current version is v3.2.0.
More Skills