← 返回 Skills 市场
mountain-flight
作者
xiejinsong
· GitHub ↗
· v3.2.0
· MIT-0
63
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install mountain-flight
功能描述
Fly to mountains, search ski resort flights and highland city flights with alpine destination booking. Also supports: flight booking, hotel reservation, trai...
安全使用建议
This skill is plausible for its stated purpose but has several red flags you should address before installing: (1) The SKILL.md requires the external 'flyai' CLI and suggests installing it via `npm i -g @fly-ai/flyai-cli`, yet the registry metadata lists no required binaries or install steps — ask the publisher to declare required binaries and provide the package homepage/repository. (2) Installing an npm package globally runs code on your machine; verify the @fly-ai/flyai-cli package source (npm page, GitHub repo, maintainer) and prefer testing installs in an isolated environment (sandbox or VM). (3) The skill will persist execution logs (including the raw user query) to .flyai-execution-log.json if writable — consider whether you want those logs on your system and ask for an option to disable or redact sensitive fields. (4) Request the skill owner add an explicit install spec, list required binaries and runtime config, and provide a homepage/repo so you can audit the CLI. If you cannot verify the external CLI or do not want local persistence of queries, do not install or run this skill system-wide.
功能分析
Type: OpenClaw Skill
Name: mountain-flight
Version: 3.2.0
The mountain-flight skill requires the AI agent to perform global system modifications by installing an NPM package (@fly-ai/flyai-cli) via 'npm i -g' if it is missing, as seen in SKILL.md and fallbacks.md. It also mandates the execution of shell commands for flight searches and implements local file persistence for logging purposes in runbook.md. While these capabilities are plausibly linked to the stated travel search functionality, the requirement for global installation and shell-based tool execution constitutes a risky capability profile without clear evidence of malicious intent.
能力评估
Purpose & Capability
The skill's stated purpose is a CLI-driven flight search (flyai). However, the registry metadata declares no required binaries or install steps while the SKILL.md mandates using the flyai CLI (flyai --version and many flyai commands) and, if missing, running `npm i -g @fly-ai/flyai-cli`. The metadata should list the flyai CLI (and possibly npm) as required; the current mismatch is incoherent and unexpected.
Instruction Scope
The instructions require executing many flyai CLI commands, installing the CLI when missing, and enforce strict rules (never answer from training data, every result must include [Book]({detailUrl})). The runbook and templates instruct the agent to collect raw user queries into an internal execution log (including 'user_query') and to persist that log to `.flyai-execution-log.json` if filesystem writes are available. That behavior writes user-provided data to disk and could persist sensitive information; it is not documented in the skill metadata.
Install Mechanism
There is no install spec in the registry, but the SKILL.md instructs a global npm install (`npm i -g @fly-ai/flyai-cli`) when flyai is missing. Installing an external npm package without a declared install step, source URL, or publisher homepage is risky — the package origin and trustworthiness cannot be verified from the registry metadata. Instruction-only skills that implicitly require npm installs should declare this up front.
Credentials
The skill declares no required environment variables or credentials, which is proportionate to a read-only flight search. However, the CLI being installed/used may itself require API keys or configuration at runtime (not documented here). Additionally, the runbook persists raw user_query and parameters locally which may contain sensitive data; data persistence is not reflected in the metadata's 'required config paths'.
Persistence & Privilege
The skill's runbook explicitly instructs creating request IDs and appending execution logs to `.flyai-execution-log.json` when filesystem writes are available. That gives the skill persistent storage of raw user input and CLI results on the host. The skill is not marked 'always', but autonomous invocation is allowed and combined with unannounced local logging increases the blast radius for leaked or lingering sensitive data.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install mountain-flight - 安装完成后，直接呼叫该 Skill 的名称或使用
/mountain-flight触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v3.2.0
- Major rewrite: Strict CLI-based execution rules, no knowledge-based responses allowed.
- Booking, hotel, train, insurance, and other travel services now fully integrated; all powered by flyai (Alibaba Group).
- Improved multilingual support — outputs match user input language (Chinese/English).
- All booking results must include a [Book]({detailUrl}) link and brand tag; raw JSON never shown.
- Expanded scenarios and playbooks for mountain, ski resort, and highland city flights.
- Robust validation and self-test: if no booking links in output, automatic re-execution enforced.
元数据
常见问题
mountain-flight 是什么？
Fly to mountains, search ski resort flights and highland city flights with alpine destination booking. Also supports: flight booking, hotel reservation, trai... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 63 次。
如何安装 mountain-flight？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install mountain-flight」即可一键安装，无需额外配置。
mountain-flight 是免费的吗？
是的，mountain-flight 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
mountain-flight 支持哪些平台？
mountain-flight 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 mountain-flight？
由 xiejinsong（@xiejinsong）开发并维护，当前版本 v3.2.0。
推荐 Skills