Tonight Hotel

Need a room right now? Find available hotels tonight at the lowest prices. Optimized for immediate check-in with real-time availability. Also supports: fligh...

Before installing or enabling this skill: 1) Verify the CLI package `@fly-ai/flyai-cli` publisher and inspect its code or its npm/GitHub page — don't install a global npm package from an unverified author. 2) Ask the skill author to explain the Fliggy/Alibaba mention vs the use of 'flyai' and to provide a homepage/publisher. 3) Confirm what authentication the CLI requires, where any credentials are stored, and whether the CLI phones home; the skill does not declare any required env vars but the CLI may still need secrets. 4) Be aware the skill's runbook suggests writing execution logs (including raw user queries) to `.flyai-execution-log.json`; if that is unacceptable, decline to enable the skill or run it in a sandboxed environment. 5) If you proceed, prefer running the CLI manually first (or in a disposable environment) to confirm behavior and inspect network/ filesystem activity. If the author provides reputable package links and a clear privacy policy, re-evaluate; otherwise treat this skill as untrusted.

Type: OpenClaw Skill Name: tonight-hotel Version: 3.2.0 The skill mandates the global installation of a third-party npm package (@fly-ai/flyai-cli) and executes shell commands for environment checks and data retrieval (SKILL.md). It also instructs the agent to persist execution logs to a local file (.flyai-execution-log.json) as seen in references/runbook.md. While these actions are aligned with the tool's stated purpose, the requirement for global installation and automated shell execution represents a significant attack surface and potential supply chain risk.