← 返回 Skills 市场

Lap Airline Code Lookup Api

Name: Lap Airline Code Lookup Api
Author: mickmicksh

作者 mickmicksh · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ⚠ suspicious

126

总下载

当前安装

版本数

在 OpenClaw 中安装

/install lap-airline-code-lookup-api

功能描述

Airline Code Lookup API skill. Use when working with Airline Code Lookup for reference-data. Covers 1 endpoint.

使用说明 (SKILL.md)

Airline Code Lookup API

API version: 1.2.1

Auth

No authentication required.

Base URL

https://test.api.amadeus.com/v1

Setup

No auth setup needed
GET /reference-data/airlines -- verify access

Endpoints

1 endpoints across 1 groups. See references/api-spec.lap for full details.

reference-data

Method	Path	Description
GET	/reference-data/airlines	Return airlines information.

Common Questions

Match user requests to endpoints in references/api-spec.lap. Key patterns:

"List all airlines?" -> GET /reference-data/airlines

Response Tips

Check response schemas in references/api-spec.lap for field details

CLI

# Update this spec to the latest version
npx @lap-platform/lapsh get airline-code-lookup-api -o references/api-spec.lap

# Search for related APIs
npx @lap-platform/lapsh search airline-code-lookup-api

References

Full spec: See references/api-spec.lap for complete endpoint details, parameter tables, and response schemas

Generated from the official API spec by LAP

安全使用建议

This appears to be a minimal, read-only API helper, but there are a few things to verify before installing or using it: - Confirm authentication requirements: try a manual curl to https://test.api.amadeus.com/v1/reference-data/airlines — if the API requires an API key or OAuth, the SKILL.md is incomplete and the skill will not work without adding credentials. Do not assume 'No authentication required' is correct. - Missing local spec: SKILL.md points to references/api-spec.lap, but that file is not included. Ask the author for the API spec or provide your own; without it the agent may not have parameter/response details it expects. - npx commands: the doc suggests using `npx @lap-platform/lapsh` which will download code from the npm registry when run. Only run that if you trust the package and review its source. Consider fetching the spec manually from the official API docs instead. - If you plan to allow autonomous agent use, be cautious: the skill can make network requests to an external API. If you must supply credentials to make it work, only provide least-privilege keys and verify the skill's implementation first. If you want a safer proceed: contact the skill author for the missing spec and clarification on auth, or run manual tests against the API endpoint before enabling this skill for agents.

功能分析

Type: OpenClaw Skill Name: lap-airline-code-lookup-api Version: 1.0.0 The skill bundle provides documentation and instructions for interacting with the Amadeus Airline Code Lookup API (test.api.amadeus.com). The SKILL.md file contains standard API endpoint descriptions and maintenance CLI commands using the '@lap-platform/lapsh' package, with no evidence of malicious intent, data exfiltration, or prompt injection.

能力评估

ℹ Purpose & Capability

The name, description, and the single endpoint (GET /reference-data/airlines) are consistent with an airline-code lookup helper. However the declared Base URL is a third-party API (https://test.api.amadeus.com/v1) while the SKILL.md states 'No authentication required' and the skill requests no credentials—Amadeus-style APIs commonly require API keys/OAuth. This mismatch is unexplained and could indicate the instructions are incomplete or outdated.

⚠ Instruction Scope

Instructions are generally narrow (call GET /reference-data/airlines, consult references/api-spec.lap). But SKILL.md references a local file (references/api-spec.lap) that is not present in the skill bundle, so the instructions expect resources that don't exist. The CLI examples (npx @lap-platform/lapsh ...) would cause npm to fetch packages if executed; while not malicious by itself, it is an action that may download and run external code. The instructions do not request or exfiltrate unrelated files or environment variables.

✓ Install Mechanism

No install spec and no shipped code files — the skill is instruction-only. That minimizes installer risk because nothing in the package will be written to disk automatically. However the provided CLI examples use npx which would fetch code at runtime if an agent or user runs them.

ℹ Credentials

The skill declares no required environment variables or credentials. That is low privilege and would be appropriate for a public, unauthenticated API. However the chosen base URL is a third-party (Amadeus) test endpoint where authentication is commonly required; the lack of any auth/account variables is therefore unexpected and unexplained.

✓ Persistence & Privilege

The skill does not request persistent privileges (always:false) and does not modify other skill or system configurations per the provided files. Default autonomous invocation is allowed but not combined with other privilege escalations here.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install lap-airline-code-lookup-api
安装完成后，直接呼叫该 Skill 的名称或使用 /lap-airline-code-lookup-api 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release of Airline Code Lookup API skill. - Provides an interface to the Amadeus Airline Code Lookup API (v1.2.1) - Supports one endpoint: GET /reference-data/airlines for airline information - No authentication required - Includes setup and usage instructions - References full API details in references/api-spec.lap

元数据

Slug lap-airline-code-lookup-api

版本 1.0.0

许可证 MIT-0

累计安装 1

当前安装数 1

历史版本数 1

常见问题