反向穷游助手，我有X元能去哪？输入总预算、出发城市、可出行天数，AI反向搜索所有可能性，生成3档方案（省钱极限版/舒适版/极限拉满版），每档含完整预算拆解。当用户提到"我有X元"、"预算XX能去哪"、"这些钱能去哪"、"反向穷游"、"穷游推荐"、"预算旅行"时使用。

This skill matches its stated travel-planning purpose, but it contains actionable instructions that affect system security: it tells the agent to install a global npm CLI (may require sudo) and repeatedly recommends disabling TLS certificate verification (NODE_TLS_REJECT_UNAUTHORIZED=0). If you plan to use it, consider: 1) refuse to run the TLS bypass — it makes network calls susceptible to MITM; 2) prefer installing the FlyAI CLI yourself after reviewing the package on npm/GitHub rather than letting the agent run global installs; 3) be aware the skill will read and write ~/.flyai/user-profile.md (and will attempt to use any platform memory APIs), so do not store sensitive secrets in that file; 4) if you are uncomfortable with automatic network installs or file writes, decline or sandbox the skill. If you want a safer setup, request a version that omits TLS bypasses and that documents exactly which external packages/hosts it will call.

Type: OpenClaw Skill Name: flyai-reverse-budget Version: 1.0.1 The skill bundle contains high-risk instructions that introduce significant security vulnerabilities and potential supply chain risks. Most notably, workflow.md directs the agent to globally install an NPM package (@fly-ai/flyai-cli) which differs from the package name mentioned in tools.md (@anthropic-ai/flyai-cli), a common indicator of typosquatting. Furthermore, the instructions in SKILL.md and workflow.md explicitly mandate disabling SSL certificate verification (NODE_TLS_REJECT_UNAUTHORIZED=0) for all network commands, exposing the agent to Man-in-the-Middle (MitM) attacks. While these actions are framed as setup and troubleshooting steps for a travel assistant, the combination of a suspicious global installer and the intentional bypass of core security protocols warrants a suspicious classification.