← 返回 Skills 市场
ysxiiun

must-play-recommendations

作者 SeaSon · GitHub ↗ · v1.0.1 · MIT-0
cross-platform ⚠ suspicious
85
总下载
1
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install must-play-recommendations
功能描述
为用户推荐城市的必玩景点。当用户询问某个城市有什么好玩的、景点推荐、必去景点、旅游攻略时触发。核心能力是基于 FlyAI CLI 获取城市的5A级景区和热门好评景点,提供详细推荐信息。
安全使用建议
Before installing or enabling this skill: (1) Understand it relies on the FlyAI CLI — ensure flyai is installed from a trusted source (e.g., official package registry) or the skill will fail. (2) The FlyAI CLI can use an API key (FLYAI_API_KEY) or stored config; confirm whether you have such credentials configured and whether you want this skill to make networked queries using them. If you don't want it to access your FlyAI account, do not set the API key in the environment or CLI config. (3) Ask the skill author to declare required binaries and any credential usage in the registry metadata (so there are no surprises). (4) If you care about isolation, run the skill in a sandboxed environment or review FlyAI CLI call outputs (they include external booking links) before acting on returned URLs. (5) If anything about undeclared dependencies or network calls makes you uncomfortable, treat this as moderate-risk and request the maintainer add an install spec and explicit credential handling documentation.
功能分析
Type: OpenClaw Skill Name: must-play-recommendations Version: 1.0.1 The skill provides travel recommendations by executing shell commands via the `flyai` CLI tool, as seen in `SKILL.md`. It constructs these commands using user-provided input (e.g., `flyai search-poi --city-name "{城市名称}"`), which introduces a potential shell injection vulnerability if the agent fails to sanitize the input. While the instructions include a step to validate the city name and the behavior aligns with the stated travel-agent purpose, the reliance on shell execution for data retrieval is a high-risk capability that warrants a suspicious classification under the provided criteria.
能力评估
Purpose & Capability
The skill's name/description (city attraction recommendations) matches the instructions: it uses FlyAI CLI commands (search-poi, ai-search) to gather POI and semantic results. However, the SKILL.md expects the flyai CLI to be present and package.json lists @fly-ai/flyai-cli as a dependency, yet the registry metadata declares no required binaries and there is no install spec — an inconsistency between claimed runtime needs and declared requirements.
Instruction Scope
Runtime instructions remain within the stated purpose: extract city name, call flyai search-poi and ai-search, merge and de-duplicate results, and output markdown. The instructions do not ask the agent to read unrelated system files or transmit arbitrary local data. They will include external booking links returned by FlyAI (expected for travel recommendations).
Install Mechanism
This is instruction-only with no install spec (lowest install risk). Nevertheless package.json lists the FlyAI CLI dependency but no automated install is provided; the skill assumes the environment already has flyai installed or the operator will install it. That mismatch should be resolved or documented to avoid silent failures or surprise manual installs.
Credentials
The skill declares no required environment variables, but the FlyAI CLI (per flyai-readme.md) supports/uses an optional FLYAI_API_KEY and configuration. If a user or environment has FlyAI credentials configured, the skill will indirectly use them via the CLI. Because credentials are not declared in metadata and the SKILL.md doesn't explicitly state how secrets are used, there's a risk of undeclared credential access/exfiltration via CLI network calls. The skill itself does not request unrelated credentials, but the indirect dependency on a networked CLI raises proportionality concerns.
Persistence & Privilege
The skill is not always-enabled and does not request persistent/privileged platform presence. It's instruction-only and does not modify other skills or system-wide settings according to available files.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install must-play-recommendations
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /must-play-recommendations 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
- 新增 FlyAI CLI 详细文档链接(flyai-readme.md)作为相关资源。 - 功能和逻辑未变,仅补充文档说明与资源引用,完善使用指导。
v1.0.0
- Initial release of the must-play-recommendations skill. - Provides detailed, high-quality travel recommendations for any specified Chinese city, focusing on 5A and highly rated attractions. - Integrates FlyAI CLI’s search-poi and ai-search commands to gather real-time data on 5A/4A scenic spots and top-reviewed destinations. - Outputs results in rich Markdown format including images, descriptions, booking links, and travel tips. - Strict rules exclude low-quality, unpopular, or solely “cost-effective” recommendations. - Includes robust error handling and extensible design for future data sources (e.g., Xiaohongshu, Dianping).
元数据
Slug must-play-recommendations
版本 1.0.1
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 2
常见问题

must-play-recommendations 是什么?

为用户推荐城市的必玩景点。当用户询问某个城市有什么好玩的、景点推荐、必去景点、旅游攻略时触发。核心能力是基于 FlyAI CLI 获取城市的5A级景区和热门好评景点,提供详细推荐信息。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 85 次。

如何安装 must-play-recommendations?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install must-play-recommendations」即可一键安装,无需额外配置。

must-play-recommendations 是免费的吗?

是的,must-play-recommendations 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

must-play-recommendations 支持哪些平台?

must-play-recommendations 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 must-play-recommendations?

由 SeaSon(@ysxiiun)开发并维护,当前版本 v1.0.1。

💬 留言讨论