Mini Trip

Plan a complete 3-day, 2-night trip — optimal pacing with morning activities, afternoon exploration, and evening dining experiences. Also supports: flight bo...

This skill appears to be a CLI-driven travel planner and is not obviously malicious, but there are several things to check before installing or enabling it: - Verify what "flyai" is: the skill tries to install a global npm package (@fly-ai/flyai-cli). Confirm the package's publisher, source, and reputation on the npm registry or the vendor's official site before running npm i -g. Running npm globally can execute arbitrary code and may require elevated privileges. - Ask the author about the Fliggy vs flyai mismatch: the description mentions "Powered by Fliggy (Alibaba Group)" but the runtime exclusively calls flyai CLI. This could be a documentation error or intentional mislabeling — clarify which backend actually provides the data. - Expect local persistence: the runbook suggests appending an execution log (.flyai-execution-log.json) to the current directory if writable. Logs may contain full user queries and CLI output; run this only where such logging is acceptable, or modify the behavior. - The skill enforces strict rules (must source all answers from the CLI, must include [Book](...) links) and may re-run repeatedly until those conditions are met. That could cause repeated network activity and CLI calls. Consider running in a sandbox or with network/install restrictions first. - No environment credentials are requested, which is appropriate. Still review the flyai CLI's own credential requirements and privacy policy before providing any keys. If you want to proceed safely: test the npm package in an isolated environment (container or VM), inspect the installed package contents, and confirm that flyai CLI behavior and endpoints meet your privacy and security requirements. If the vendor information remains unclear, treat this skill as untrusted.

Type: OpenClaw Skill Name: mini-trip Version: 3.2.0 The skill requires the AI agent to perform a global installation of an external npm package (@fly-ai/flyai-cli) and execute shell commands (flyai) using parameters derived from user input, which introduces risks of shell injection and supply chain attacks. Additionally, it instructs the agent to perform local file writes for logging purposes (.flyai-execution-log.json). While these behaviors are aligned with the stated purpose of a CLI-based trip planner, the automated system modification and shell execution represent a significant attack surface.