← Back to Skills Marketplace
ivan97

reunion-trip

by Yangki Zhang · GitHub ↗ · v3.2.0 · MIT-0
cross-platform ⚠ suspicious
49
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install reunion-trip
Description
Book flights for family and class reunion trips. Also supports: flight booking, hotel reservation, train tickets, attraction tickets, itinerary planning, vis...
Usage Guidance
This skill is instruction-only but asks agents to install and use a third-party CLI (@fly-ai/flyai-cli) at runtime and claims to be 'powered by Fliggy' — a clear mismatch. Before installing or using this skill: 1) Verify the flyai CLI package on the npm registry (publisher, popularity, repository, README) and inspect its code; 2) Confirm whether the skill actually integrates with Fliggy or flyai and ask the author for a homepage/source; 3) Be cautious about allowing automated global npm installs (they can run arbitrary code); prefer to install such CLIs manually in a sandbox or container first; 4) Ask how authentication works (where API keys or accounts are stored) and avoid providing secrets until you know the CLI's behavior; 5) If unsure, treat the skill as untrusted and do not run its automatic npm install on a production machine.
Capability Analysis
Type: OpenClaw Skill Name: reunion-trip Version: 3.2.0 The skill is a flight search and booking tool that interfaces with the `flyai` CLI. It includes standard procedures for environment verification and dependency installation (`npm i -g @fly-ai/flyai-cli`) in `SKILL.md` and `references/fallbacks.md`. The instructions are strictly focused on ensuring the agent uses real-time data from the CLI rather than its internal training data, and there is no evidence of data exfiltration, malicious command execution, or harmful prompt injection.
Capability Assessment
Purpose & Capability
The description claims the skill is 'powered by Fliggy (Alibaba Group)', but every runtime instruction, templates, and required commands reference a 'flyai' CLI and brand ('Powered by flyai'). There is no mention of Fliggy APIs, credentials, or any Fliggy-specific tooling. This mismatch suggests either copy-paste error or deliberate mislabeling; the requested tooling (flyai CLI) does not align with the stated provider.
Instruction Scope
The SKILL.md is prescriptive and stays within a tight scope: always run the flyai CLI for live data and never use training data. It does not instruct reading arbitrary local files or exfiltrating environment variables. However, it mandates installing a global npm package if the CLI is missing and insists on strict behavior (always include [Book] links, never fabricate results), which gives the skill strong control over agent output. The instructions forbid fabricating results but do not document how credentials are supplied to the CLI if needed.
Install Mechanism
There is no formal install spec in the registry, but the runtime instructions instruct agents to run `npm i -g @fly-ai/flyai-cli` if the CLI is missing. Installing a global npm package at runtime can execute arbitrary install scripts and write to the host system; the npm package's provenance is unknown (no homepage or registry metadata provided). While installing a CLI for a booking integration is plausible, doing so at runtime without vetting the package is a moderate-to-high risk.
Credentials
The skill declares no required environment variables or credentials, which is reasonable for an instruction-only skill. However, a flight/hotel booking CLI commonly requires API keys or an authenticated account; SKILL.md does not explain how the CLI authenticates or whether it will prompt for credentials or read local config. The absence of any guidance about credentials is notable and leaves ambiguity about where secrets would be supplied or stored.
Persistence & Privilege
The skill does not request persistent installation via the platform (always: false) and does not modify other skills' configs. The only persistence risk stems from the runtime instruction to globally install an npm package, which would create system presence outside the skill sandbox; this is not controlled via the registry install spec.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install reunion-trip
  3. After installation, invoke the skill by name or use /reunion-trip
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v3.2.0
reunion-trip 3.2.0 - Expanded description to clarify support for hotel reservations, train tickets, attractions, itinerary planning, visa info, travel insurance, and car rental in addition to flights. - Added detailed execution and output validation rules, including booking link and brand tag requirements. - Updated parameter mapping, playbooks, and step-by-step workflow for query handling and CLI execution. - Clarified prerequisites and command usage for the flyai CLI. - Improved compatibility information and documentation for parameter collection, error handling, and supported agents.
Metadata
Slug reunion-trip
Version 3.2.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is reunion-trip?

Book flights for family and class reunion trips. Also supports: flight booking, hotel reservation, train tickets, attraction tickets, itinerary planning, vis... It is an AI Agent Skill for Claude Code / OpenClaw, with 49 downloads so far.

How do I install reunion-trip?

Run "/install reunion-trip" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is reunion-trip free?

Yes, reunion-trip is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does reunion-trip support?

reunion-trip is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created reunion-trip?

It is built and maintained by Yangki Zhang (@ivan97); the current version is v3.2.0.

💬 Comments