Travel In China

基于飞书多维表格的智能旅游行程定制助手，可生成、查询和管理旅行计划。

This skill appears to be what it says (a Feishu Bitable-backed inbound-travel lead collector) and the code only talks to open.feishu.cn — however the registry metadata did not declare the required environment variables while the SKILL.md and tools.py do require sensitive credentials (FEISHU_APP_SECRET, etc.). Before installing: 1) Verify the skill's source repository (inspect the GitHub link) and confirm the code there matches the packaged files. 2) Only provide FEISHU_APP_SECRET to this skill if you trust the source; create a Feishu app with minimal permissions and add it only to the specific table. 3) Use a test/dummy table or limited account for initial trials, and rotate credentials afterward. 4) Confirm legal/privacy requirements for storing PII in the chosen Feishu table (consent, retention, access controls). If you can update the registry metadata to list the required env vars and a verified source URL, that would resolve the main incoherence and increase trust.

Type: OpenClaw Skill Name: tcly Version: 2.0.3 The skill is a legitimate tool designed to collect inbound travel requirements and store them in Feishu (Lark) Bitable. The Python code in `tools.py` correctly uses environment variables for sensitive credentials, implements input sanitization (length limits), and communicates exclusively with the official Feishu API (open.feishu.cn). While `SKILL.md` contains some inconsistent documentation regarding available tool names (likely due to a copy-paste error between versions), the core logic is functional and lacks any indicators of malicious intent, data exfiltration to unauthorized domains, or prompt-injection attacks.