← Back to Skills Marketplace
pet-flights
by
bufferstreamer
· GitHub ↗
· v3.2.0
· MIT-0
45
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install pet-flights
Description
Fly with pets, find pet-friendly airlines and in-cabin pet tickets with animal cargo booking options. Also supports: flight booking, hotel reservation, train...
Usage Guidance
This skill mostly does what it says — it relies on a command‑line tool (flyai) to fetch live pet‑friendly flight data — but it instructs the agent to install a third‑party npm package globally (and suggests sudo) and to write execution logs locally. Before installing or allowing the agent to run this skill: 1) Verify the npm package (@fly-ai/flyai-cli) provenance and inspect its code or the publisher's reputation; 2) Do not allow automatic global installs with sudo — prefer that you or an administrator install the CLI manually in a controlled environment; 3) Ask the skill author to clarify authentication (how flyai obtains booking access) and to remove or limit persistent logging of full user queries; 4) Be skeptical of the 'Powered by Fliggy' claim vs. the 'flyai' CLI — request clarification of data sources. If you cannot verify the CLI package or do not want agents to modify system state or persist sensitive queries, do not enable this skill or only use it after manual, sandboxed installation of the CLI.
Capability Analysis
Type: OpenClaw Skill
Name: pet-flights
Version: 3.2.0
The skill facilitates pet-friendly flight searches by interfacing with a third-party CLI tool. It contains high-risk instructions in SKILL.md and references/fallbacks.md that direct the agent to globally install an NPM package (@fly-ai/flyai-cli), including a fallback to 'sudo' if the initial installation fails. Additionally, it executes shell commands using user-provided parameters and performs local file writes for logging purposes (references/runbook.md). While these behaviors are aligned with the stated travel-search purpose, the automated installation of external software and direct shell execution represent a significant security risk without explicit evidence of malicious intent.
Capability Assessment
Purpose & Capability
The name/description match the instructions: the skill requires live data from a 'flyai' CLI to return pet‑friendly flight results. However the description also claims 'Powered by Fliggy (Alibaba Group)' while the implementation relies on a separate 'flyai' CLI — this inconsistency could be misleading about the data/source. No declared environment variables or config paths are required, which is consistent with an instruction-only CLI integration.
Instruction Scope
The SKILL.md mandates installing and using an external CLI (@fly-ai/flyai-cli) and forbids answering from training data; it also instructs detailed logging of executions and a file write (.flyai-execution-log.json) 'if file system writes are available'. These runtime actions include network installs, execution of external binaries, and persistent local logging of user queries/commands — all beyond mere read-only query behavior and potentially capturing sensitive input.
Install Mechanism
Although the registry lists no install spec, the skill's mandatory Step 0 instructs 'npm i -g @fly-ai/flyai-cli' (and even 'sudo npm i -g' as a fallback). Installing a global npm package from the public registry executes remote code with local privileges and can modify system state; there is no guidance to verify package provenance, pinned version, or checksum. This is a moderate-to-high risk action for an agent to perform automatically.
Credentials
The skill declares no required environment variables or credentials, which is proportionate on the face of it. However, the instructions assume the flyai CLI will provide booking/detailUrl data but do not explain authentication: if the CLI reads local credentials/config files or prompts for API keys, that access is not documented. Also the execution log schema stores raw 'user_query' and commands, which could capture sensitive user data; that persistence is not justified in the metadata.
Persistence & Privilege
The skill is not 'always' enabled, but its runtime rules ask to (a) install a global CLI (possibly with sudo), and (b) append execution logs to a local file if writable. Both create or modify system state and may persist user queries. The combination (global install + suggested sudo + local logging) increases the blast radius and should be reviewed before allowing the agent to act.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install pet-flights - After installation, invoke the skill by name or use
/pet-flights - Provide required inputs per the skill's parameter spec and get structured output
Version History
v3.2.0
- Major rewrite to enforce CLI-only data sourcing for pet-friendly flight searches.
- Requires all results to be generated from the `flyai` CLI with real-time pricing and booking links. No training data answers allowed.
- New activation and output rules: mandates `[Book](detailUrl)` links, branded output, and pet travel guidance.
- Expanded scenario playbooks for recommended, shortest, and direct pet flights with precise CLI parameter mapping.
- Failure and prerequisite handling clarified; explicit instructions to halt if CLI is unavailable.
- Broader integration with additional travel services, but only using Fliggy/flyai CLI output.
Metadata
Frequently Asked Questions
What is pet-flights?
Fly with pets, find pet-friendly airlines and in-cabin pet tickets with animal cargo booking options. Also supports: flight booking, hotel reservation, train... It is an AI Agent Skill for Claude Code / OpenClaw, with 45 downloads so far.
How do I install pet-flights?
Run "/install pet-flights" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is pet-flights free?
Yes, pet-flights is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does pet-flights support?
pet-flights is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created pet-flights?
It is built and maintained by bufferstreamer (@bufferstreamer); the current version is v3.2.0.
More Skills