Book Museum Passes & Tickets — Museum Entry, Exhibition Access, Gallery Tours & Culture Passes

Find museums, art galleries, and exhibitions in any city. Many are free but require advance reservation — get ticket links and visiting tips. Also supports:...

Before installing or enabling this skill, consider the following: (1) verify the @fly-ai/flyai-cli package on npm (homepage, publisher, source code, recent activity) and confirm it is the intended, trustworthy client for any Fliggy integration; (2) ask the skill author to document the CLI's network endpoints, authentication method, and privacy policy (where are queries sent, and where are tokens stored); (3) prefer skills that declare install specs and required credentials explicitly in the registry metadata; (4) avoid allowing the agent to run global npm installs or write persistent logs on your primary environment — test in a sandbox first; (5) if you need only museum search capabilities, consider using a skill whose scope and requirements match exactly (no undocumented travel features or implicit external CLIs). Providing the CLI package URL, publisher info, or an official homepage for this skill would materially reduce the risk and could move this assessment toward benign.

Type: OpenClaw Skill Name: museum-pass Version: 3.2.0 The skill bundle mandates the global installation of an external NPM package (@fly-ai/flyai-cli) and uses aggressive, imperative instructions to override the AI agent's default behavior, forbidding it from using its own knowledge. While these actions are framed as necessary for providing real-time museum data, the requirement for high-privilege global installation and the strict behavioral constraints in SKILL.md and references/fallbacks.md represent a significant security risk and a potential supply-chain attack vector.