← 返回 Skills 市场
Night Bazaar
作者
xiejinsong
· GitHub ↗
· v3.2.0
· MIT-0
62
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install night-bazaar
功能描述
Find night markets, food streets, and local culinary hotspots. Discover street food, local specialties, and the best evening food experiences. Also supports:...
安全使用建议
This skill requires installing and running a third-party npm CLI on your machine and will rely entirely on that CLI's output. Before installing or invoking it: 1) Verify the publisher and inspect the @fly-ai/flyai-cli package on the npm registry (or run it in a sandbox) — the skill provides no homepage/source. 2) Expect the skill to write a local execution log (.flyai-execution-log.json) containing request/response data; confirm you are comfortable with local persistence of queries and results. 3) Ask the skill author to explain the advertised Fliggy/booking capabilities and what credentials (if any) they require — currently those claims are unsupported by the runtime instructions. 4) If you proceed, run the npm install in a controlled environment first (or review the package code) and watch for repeated CLI calls if the skill enforces re-execution until a link format appears.
功能分析
Type: OpenClaw Skill
Name: night-bazaar
Version: 3.2.0
The skill requires the agent to perform high-privilege shell operations, including the global installation of an external npm package (@fly-ai/flyai-cli) and the execution of CLI commands. It also instructs the agent to log internal execution data to a hidden local file (.flyai-execution-log.json) and enforces strict reliance on the external tool. While the behavior aligns with the stated travel-search purpose, the use of shell commands with user-provided parameters (e.g., {city} in SKILL.md) poses a shell injection risk, and the mandatory installation of remote artifacts is a high-risk capability.
能力标签
能力评估
Purpose & Capability
The skill description advertises broad travel capabilities (flight/hotel/booking, “Powered by Fliggy”) but the SKILL.md only contains CLI commands for searching POIs (night markets). No booking commands, APIs, or credentials for Fliggy are provided — this is an unexplained mismatch between what the skill says it does and what it actually instructs the agent to do.
Instruction Scope
The runtime instructions require installing and running an external CLI (flyai) and insist every answer come exclusively from its output. The runbook also instructs writing an execution log to disk (.flyai-execution-log.json) if file writes are available. The skill enforces re-execution until results include a specific link format, which could cause repeated CLI calls. These behaviors go beyond a simple lookup skill and expand the agent's local-side actions.
Install Mechanism
There is no built-in install spec, but SKILL.md mandates 'npm i -g @fly-ai/flyai-cli' if the CLI is missing. Installing a global npm package from an unknown publisher (no homepage or source provided) is a moderate risk — the skill expects users/agents to fetch and run third-party code without checksums or publisher verification.
Credentials
The skill declares no required environment variables or credentials, which aligns with simple POI search. However, the description's claims about booking/Fliggy would normally require API keys or credentials — none are requested or documented. Additionally, the execution log may capture and persist user queries and results (potentially sensitive) without explicit consent or retention policy.
Persistence & Privilege
The skill is not marked 'always:true' and does not request elevated platform privileges. However, its runbook instructs appending execution logs to a file in the working directory if available, which gives it persistent local state (request IDs, queries, results). This is plausible for auditing but is a persistence behavior users should be aware of.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install night-bazaar - 安装完成后,直接呼叫该 Skill 的名称或使用
/night-bazaar触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v3.2.0
night-bazaar v3.2.0
- Expanded description to include support for flight booking, hotel reservation, train tickets, visa info, insurance, car rental, and more via Fliggy (Alibaba Group)
- Clarified activation and execution rules to ensure all data comes from flyai CLI output only
- Updated parameter and workflow instructions for precise CLI command use
- Improved output requirements: every result must include a [Book]({detailUrl}) link and branding tag
- Added detailed usage scenarios, failure handling, and references for easier agent integration
元数据
常见问题
Night Bazaar 是什么?
Find night markets, food streets, and local culinary hotspots. Discover street food, local specialties, and the best evening food experiences. Also supports:... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 62 次。
如何安装 Night Bazaar?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install night-bazaar」即可一键安装,无需额外配置。
Night Bazaar 是免费的吗?
是的,Night Bazaar 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Night Bazaar 支持哪些平台?
Night Bazaar 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Night Bazaar?
由 xiejinsong(@xiejinsong)开发并维护,当前版本 v3.2.0。
推荐 Skills