← 返回 Skills 市场
Nature Spots
作者
xiejinsong
· GitHub ↗
· v3.2.0
· MIT-0
74
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install nature-spots
功能描述
Find mountains, lakes, waterfalls, national parks, and natural wonders. Includes trail difficulty, best seasons, and photography tips. Also supports: flight...
安全使用建议
This skill forces installing and running an external CLI (npm i -g @fly-ai/flyai-cli), relies entirely on that CLI for answers, and suggests writing execution logs to disk — yet the registry lists no install or credential requirements and the 'Fliggy' branding doesn't clearly match the flyai package. Before installing or enabling this skill: 1) Verify the origin, maintainer, and npm page/source repository for @fly-ai/flyai-cli (check publisher, recent activity, and code). 2) Ask the author to declare required credentials (what keys/accounts are needed) and an explicit install spec or trusted release URL. 3) If you must try it, run the npm install in a sandboxed VM/container and inspect what the CLI does (network endpoints, config files, tokens). 4) Be cautious about booking/payment flows — confirm where credentials and payment data are sent. If you cannot verify the CLI's trustworthiness and the declared requirements, avoid installing globally or granting the skill persistent access.
功能分析
Type: OpenClaw Skill
Name: nature-spots
Version: 3.2.0
The skill requires the global installation of an external NPM package (@fly-ai/flyai-cli) and performs local file system writes to maintain an execution log (.flyai-execution-log.json). While these actions are aligned with the stated purpose of providing real-time travel data, the use of high-privilege shell commands for package management and persistent local logging constitutes a risky capability according to the analysis criteria.
能力评估
Purpose & Capability
The skill claims travel/booking capabilities 'powered by Fliggy' but its runtime strictly requires the third-party flyai CLI (@fly-ai/flyai-cli). The registry metadata lists no required binaries or env vars, which contradicts the SKILL.md that mandates installing and using a specific CLI. Booking/flight/hotel features normally require credentials or API access, yet no credentials are declared.
Instruction Scope
SKILL.md forces the agent to be a 'CLI executor' and to never answer from training data — it requires running flyai commands for all responses, enforces output/link formats, and instructs creation of request logs. It also tells the agent to re-execute until booking links are present. These runtime instructions extend beyond simple lookup: they install/run external software and may cause persistent local writes (runbook logs).
Install Mechanism
There is no declared install spec in the registry, but the skill's prerequisites and instructions explicitly require running 'npm i -g @fly-ai/flyai-cli' and executing the installed CLI. Asking users/agents to install a global npm package from an unverified namespace without an install spec is a risk and inconsistent with the registry metadata.
Credentials
The skill supports bookings, flights, insurance, and other actions that normally require credentials or payment API access, but requires.env and primary credential fields are empty. The runbook also logs 'user_query' and other request data to a local file if available, which could capture sensitive info despite no declared data handling or consent flow.
Persistence & Privilege
The skill does not request 'always: true' (good), but the runbook suggests appending logs to .flyai-execution-log.json if filesystem writes are available — this implies persistent local storage of user queries and CLI call metadata. The skill also instructs installing a global binary, which modifies the host environment.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install nature-spots - 安装完成后,直接呼叫该 Skill 的名称或使用
/nature-spots触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v3.2.0
- Added support for flight booking, hotel reservation, train tickets, attraction tickets, itinerary planning, visa info, travel insurance, and car rental, powered by Fliggy (Alibaba Group).
- Enforced that all data must come from the flyai CLI; removed use of training data for travel queries.
- Updated output rules requiring every result to include a booking link from flyai CLI data.
- Refined activation triggers and parameter collection steps for stricter CLI usage and compliance.
- Expanded compatibility details and domain knowledge for better parameter mapping and output enrichment.
元数据
常见问题
Nature Spots 是什么?
Find mountains, lakes, waterfalls, national parks, and natural wonders. Includes trail difficulty, best seasons, and photography tips. Also supports: flight... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 74 次。
如何安装 Nature Spots?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install nature-spots」即可一键安装,无需额外配置。
Nature Spots 是免费的吗?
是的,Nature Spots 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Nature Spots 支持哪些平台?
Nature Spots 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Nature Spots?
由 xiejinsong(@xiejinsong)开发并维护,当前版本 v3.2.0。
推荐 Skills