← 返回 Skills 市场
xiejinsong

national-day-flight

作者 xiejinsong · GitHub ↗ · v3.2.0 · MIT-0
cross-platform ⚠ suspicious
65
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install national-day-flight
功能描述
Book National Day holiday flights for October 1st Golden Week travel. Also supports: flight booking, hotel reservation, train tickets, attraction tickets, it...
安全使用建议
Before installing or using this skill: 1) Verify the npm package @fly-ai/flyai-cli — check its npm page, publisher, repository, and recent maintainer activity; do not run global installs from unknown publishers. 2) Confirm the "Fliggy (Alibaba)" claim with the skill author or documentation — the SKILL.md uses 'flyai' branding, not Fliggy, which is inconsistent. 3) If you must test, run the CLI installation in an isolated environment (VM/container) first to observe postinstall behavior. 4) Ask the author whether any booking or account credentials are required at runtime (none are declared). 5) Be cautious about the skill's strict re-run/self-test rules — they could cause repeated installs or loops; if you enable autonomous invocation, monitor initial runs closely and restrict scope until you trust the CLI. If you cannot confirm the package/source, treat this skill as untrusted and avoid installing the global npm package.
功能分析
Type: OpenClaw Skill Name: national-day-flight Version: 3.2.0 The skill requires the agent to perform a global installation of an external NPM package (`@fly-ai/flyai-cli`) if the command is not found (`SKILL.md`, `references/fallbacks.md`). While this is functionally consistent with the travel booking purpose, the practice of auto-installing global dependencies is a high-risk behavior that could lead to Remote Code Execution (RCE) if the package is compromised. No direct evidence of data exfiltration or intentional malice was found in the provided logic.
能力评估
Purpose & Capability
The skill declares it is "powered by Fliggy (Alibaba Group)" and claims support for hotels, trains, and more, but all runtime instructions require a CLI named flyai (npm package @fly-ai/flyai-cli) and only show flight-search commands. The Fliggy/brand claim and broader service list are not supported by the instructions — this inconsistency could be marketing noise or a sign that the source/third-party integration is misdeclared.
Instruction Scope
The SKILL.md instructs the agent to always use the flyai CLI and to install it via `npm i -g @fly-ai/flyai-cli` if missing. It enforces hard rules (never answer from training data, always include [Book](detailUrl) links, re-run until conditions are satisfied). Those strict re-execution/self-test rules risk repeated installs/CLI invocations and could create loops or unexpected side effects if the CLI behaves poorly. The instructions do not request or reference any system credentials, nor do they read unrelated files, but the forced global npm install writes to the host and should be vetted.
Install Mechanism
There is no install spec in the registry, but the runtime instructions require a global npm install of @fly-ai/flyai-cli. Installing a global package from an unverified namespace is a moderate risk: npm packages execute arbitrary code during install/postinstall, and the skill provides no homepage, source repo, or verified registry link to validate the package. The install command will modify the system (global npm).
Credentials
The skill requests no environment variables or credentials, which is proportionate for a read-only flight search skill that only returns booking links. However, the description implies booking and other services (hotels, trains) which typically require account credentials; the absence of credential requirements could mean the skill only produces search results/links, or it could indicate omitted/hidden steps. Confirm whether actual booking requires separate credentials or authentication in the CLI.
Persistence & Privilege
The skill does not request 'always: true' and does not declare any persistent modifications to other skills or system-wide configuration. Autonomous invocation is allowed (platform default), which is expected for skills of this type.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install national-day-flight
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /national-day-flight 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v3.2.0
Version 3.2.0 — Major rules and structure update, focused on CLI integrity and strict travel data source enforcement. - Clearly mandates all results must originate from flyai CLI (never training data), with strict enforcement and self-validation rules. - Adds robust mandatory CLI environment checks; requires flyai-cli installation if absent. - Enforces booking link presence ([Book]({detailUrl})) in all replies; missing link triggers workflow halt and correction. - Expands multi-modal booking: supports flights, hotels, trains, attractions, visas, travel insurance, and car rental for Golden Week. - Defines specialized CLI playbooks for different user intents (cheapest, fastest, direct flights, etc.). - Improved multilingual support (auto-detected Chinese/English response). - Enhanced output rules: summary-first format, tips for National Day, comparison table, strict Markdown layout.
元数据
Slug national-day-flight
版本 3.2.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

national-day-flight 是什么?

Book National Day holiday flights for October 1st Golden Week travel. Also supports: flight booking, hotel reservation, train tickets, attraction tickets, it... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 65 次。

如何安装 national-day-flight?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install national-day-flight」即可一键安装,无需额外配置。

national-day-flight 是免费的吗?

是的,national-day-flight 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

national-day-flight 支持哪些平台?

national-day-flight 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 national-day-flight?

由 xiejinsong(@xiejinsong)开发并维护,当前版本 v3.2.0。

💬 留言讨论