← 返回 Skills 市场
meituan-travel
作者
meituan-travel-ai
· GitHub ↗
· v1.0.8
· MIT-0
204
总下载
2
收藏
0
当前安装
8
版本数
在 OpenClaw 中安装
/install meituan-travel
功能描述
美团酒旅官方 Skill，您的专属 AI 旅行管家。酒店、机票、火车票、景点门票、度假一站搞定，还能帮你找优惠、比价格、定行程。美团海量真实点评加持，出行每一步都更放心。
安全使用建议
This looks like an authentic CLI-wrapper skill for Meituan travel and mostly coherent. Before installing or enabling it: 1) Verify the npm package @meituan-travel/ht-ai is the official publisher (publisher/org, package page, and source) so npx won't execute untrusted code. 2) Provide only a minimally-scoped MEITUAN_HT_TOKEN (confirm scope, billing/quota) and avoid making MEITUAN_RAW_JSON an always-set secret unless you need raw JSON output. 3) Confirm your platform enforces non-logging of environment secrets (the SKILL.md requests this but cannot enforce it). 4) If you run this in an automated agent, consider rate limits and restrict automatic invocation to travel-related intents. These checks will reduce risk while using the skill.
功能分析
Type: OpenClaw Skill
Name: meituan-travel
Version: 1.0.8
The skill is a legitimate integration for Meituan Travel services, utilizing a scoped npm package (@meituan-travel/ht-ai) and a verified Meituan developer endpoint. It demonstrates good security practices by instructing the AI agent to perform shell-safe escaping on user input and explicitly forbidding the logging or echoing of the sensitive MEITUAN_HT_TOKEN. No indicators of data exfiltration, persistence, or malicious intent were identified.
能力评估
Purpose & Capability
Name/description match the runtime instructions: the SKILL.md tells the agent to call the @meituan-travel/ht-ai CLI (via npx or global install) to query Meituan travel data. Required binary (npx) and MEITUAN_HT_TOKEN align with the described purpose. Minor inconsistency: the registry summary above shows "Primary credential: none" while the skill metadata and SKILL.md declare MEITUAN_HT_TOKEN as the primary credential — this is likely an authoring/metadata mismatch, not a functional red flag.
Instruction Scope
SKILL.md only instructs running the ht-ai CLI, escaping user single quotes for shell safety, reading the declared MEITUAN_HT_TOKEN env var, and formatting results. It does not ask to read unrelated files or other system credentials. It explicitly warns not to print the token. Note: the guidance cannot by itself enforce non-logging — platform/runtime must honor it.
Install Mechanism
No install spec (instruction-only), which keeps on-disk footprint low. However runtime use of `npx @meituan-travel/ht-ai` means remote package code will be fetched/executed at call time (or the user can install globally). Verify the npm package identity and publisher (official Meituan package) before allowing runtime npx downloads.
Credentials
Requesting MEITUAN_HT_TOKEN is proportionate and expected. The declared required env list also includes MEITUAN_RAW_JSON, but SKILL.md treats MEITUAN_RAW_JSON as an optional flag to request raw JSON output — it does not need to be mandatory. Recommend the registry declare only MEITUAN_HT_TOKEN as required and treat MEITUAN_RAW_JSON as optional. Ensure the token's scope is minimal (only the APIs needed) before providing it.
Persistence & Privilege
always:false (default) and no install spec — the skill does not request permanent inclusion or write access. Metadata indicates runtime context_isolation: execution and parent_context_access: read-only, which limits privilege. No instructions try to change other skills or system-wide settings.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install meituan-travel - 安装完成后，直接呼叫该 Skill 的名称或使用
/meituan-travel触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.8
- 增加了用户 query 的 shell 安全转义说明，明确将单引号 `'` 替换为 `'\''` 以避免特殊字符导致的 CLI 命令问题。
- 补充了执行流程，新增“参数清理”步骤，提升系统安全性和稳定性。
- 其他内容保持不变。
v1.0.7
- 更新了 homepage 链接为 https://developer.meituan.com
- metadata 中增加了 primary 字段（MEITUAN_HT_TOKEN）
- 移除了 bins 里的 ht-ai，仅保留 npx
- 其余描述内容无重大调整
v1.0.6
- 新增 homepage 字段，提供官方开发者平台链接。
- 优化环境变量 requires 格式，明确 MEITUAN_HT_TOKEN 的 primary 属性。
- 其余内容保持不变，无功能或用户接口上的改动。
v1.0.5
- 增加了对本地 ht-ai 可执行文件的支持，允许直接用 ht-ai 调用核心 API（原先仅支持 npx）。
- 调整了依赖声明，新增 bins 字段支持 ht-ai。
- 其他功能与说明保持不变。
v1.0.4
- 优化 SKILL.md，调整 display_name 展示和部分描述内容，使功能介绍更直观易懂
- 更新执行指令推荐，优先引导使用全局安装的 ht-ai 命令
- 增加代理元数据，声明 agent 类型、运行时与上下文隔离要求
- 其余功能与核心执行逻辑保持不变
v1.0.3
Solving the risk detection problem
v1.0.2
**Meituan Travel Skill 1.0.2 Update Notes**
- Fully upgraded to the officially recommended Skill, providing one-stop access to hotel, flight, train ticket, attraction ticket, and vacation bookings.
- Authentication and authorization mechanism adjustments: Tokens are now configured using environment variables (MEITUAN_HT_TOKEN), eliminating the need for local writing, plaintext transmission, or persistence, thus improving security.
- Command line call optimization: Direct querying using `npx` is now uniformly recommended, supporting the latest version capabilities.
- Simplified output specifications: Maintaining a zero-reduction principle, transmitting all data (including links, images, and prices) as is; links are retained when the terminal does not support images, and discarding them is prohibited.
- Error handling and applicable scenario optimization: Added guidance on handling exit codes (especially exit 3 for authentication failure), with scenario boundary descriptions more focused on travel-related aspects.
- Documentation and security instructions updates: Added risk warnings regarding official interfaces, billing, and third-party content, clarifying token security precautions.
v1.0.0
meituan-travel v1.0.0
- 首个版本发布，提供基于美团酒旅的全链路旅行服务查询能力。
- 支持酒店、机票、火车票、景点门票、度假等一站式查询与预订。
- 实现灵活的 Token 鉴权管理与失效处理流程。
- 严格制定并规范输出格式，确保信息完整、图片链接合规展示。
- 明确使用范围，排除非旅行相关业务及出境服务指引。
- 提供可靠的错误处理和用户引导。
元数据
常见问题
meituan-travel 是什么？
美团酒旅官方 Skill，您的专属 AI 旅行管家。酒店、机票、火车票、景点门票、度假一站搞定，还能帮你找优惠、比价格、定行程。美团海量真实点评加持，出行每一步都更放心。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 204 次。
如何安装 meituan-travel？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install meituan-travel」即可一键安装，无需额外配置。
meituan-travel 是免费的吗？
是的，meituan-travel 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
meituan-travel 支持哪些平台？
meituan-travel 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 meituan-travel？
由 meituan-travel-ai（@meituan-travel-ai）开发并维护，当前版本 v1.0.8。
推荐 Skills