← Back to Skills Marketplace
red-eye-flight
by
Yangki Zhang
· GitHub ↗
· v3.2.0
· MIT-0
73
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install red-eye-flight
Description
Book red-eye flights with late night departure and overnight arrival. Also supports: flight booking, hotel reservation, train tickets, attraction tickets, it...
Usage Guidance
This skill appears to do what it says: it requires the flyai CLI and instructs the agent to use that CLI for all answers. Before installing or enabling it, verify the @fly-ai/flyai-cli package on npm (publisher, repository, recent versions, and open-source code) and prefer installing in a sandbox or ephemeral environment rather than your production system because 'npm i -g' runs code on your host. If you don't trust or can't verify the CLI publisher, decline or require manual review. Also be aware the agent will execute commands on the host (including installing software) when run — allow only if you trust that behavior.
Capability Analysis
Type: OpenClaw Skill
Name: red-eye-flight
Version: 3.2.0
The skill bundle requires the agent to perform global system modifications by executing 'npm i -g @fly-ai/flyai-cli' if the tool is not present (SKILL.md, fallbacks.md). Additionally, the command construction logic for 'flyai search-flight' uses direct parameter substitution (e.g., --origin "{{o}}") which is highly vulnerable to shell injection if the agent does not strictly sanitize user input. While these actions are aligned with the stated purpose of flight booking, the combination of high-privilege installation and potential RCE via shell injection poses a significant security risk.
Capability Assessment
Purpose & Capability
The name/description (red-eye flight booking powered by a CLI) matches the SKILL.md: it requires running the flyai CLI to get real-time results. There are no unrelated credentials, binaries, or config paths requested.
Instruction Scope
All runtime instructions are narrowly focused on building CLI commands, running flyai search commands, formatting CLI JSON into user-friendly output, and enforcing that results come from the CLI. The SKILL.md explicitly forbids using training data and forbids fabricating results. It does not instruct reading unrelated files, grabbing environment variables, or sending data to third-party endpoints beyond what the flyai CLI does.
Install Mechanism
This is an instruction-only skill (no install spec), but the runtime rules tell the agent to run 'npm i -g @fly-ai/flyai-cli' if flyai is not installed. Installing a global npm package is a standard way to obtain a CLI, but it introduces supply-chain and host-modification risk (arbitrary postinstall scripts, global binary installs). The skill does not provide a pinned, verified release URL or checksum; verify the @fly-ai/flyai-cli package (publisher, npm page, source repo) before allowing installation.
Credentials
No environment variables, credentials, or config paths are requested. The lack of credentials is coherent: the skill queries a CLI and expects booking links in the CLI output; it does not require API keys or secret access from the host.
Persistence & Privilege
always is false and the skill makes no requests to modify other skills or system-wide agent configuration. The only persistent effect would be installing the flyai CLI globally if missing — that is a normal side effect but should be considered before execution.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install red-eye-flight - After installation, invoke the skill by name or use
/red-eye-flight - Provide required inputs per the skill's parameter spec and get structured output
Version History
v3.2.0
- Improved parameter handling and CLI execution rules for reliability.
- Expanded triggering phrases for both English and Chinese input.
- Added detailed environment and self-test instructions to prevent non-CLI answers.
- Updated output rules: now includes booking link validation and enriched formatting guidance.
- Enhanced playbook and domain mapping coverage for more user scenarios.
Metadata
Frequently Asked Questions
What is red-eye-flight?
Book red-eye flights with late night departure and overnight arrival. Also supports: flight booking, hotel reservation, train tickets, attraction tickets, it... It is an AI Agent Skill for Claude Code / OpenClaw, with 73 downloads so far.
How do I install red-eye-flight?
Run "/install red-eye-flight" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is red-eye-flight free?
Yes, red-eye-flight is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does red-eye-flight support?
red-eye-flight is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created red-eye-flight?
It is built and maintained by Yangki Zhang (@ivan97); the current version is v3.2.0.
More Skills