← 返回 Skills 市场
Search Late Night & Red Eye Flights — Overnight, After-Midnight, Late Evening Departures
作者
xiejinsong
· GitHub ↗
· v3.2.0
· MIT-0
79
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install night-flights
功能描述
Find overnight and late-night departure flights — often 20-40% cheaper than daytime. Save a hotel night by flying while you sleep. Also supports: flight book...
安全使用建议
This skill expects you to install and run an unfamiliar global npm package (@fly-ai/flyai-cli) and will write an execution log file containing raw user queries. Before installing or enabling it: 1) Ask the publisher for the CLI package homepage and verify the npm package owner and source (is it really from Fliggy/Alibaba?). 2) Avoid running global npm installs with sudo; consider running the CLI in a sandboxed environment or container. 3) Inspect what the CLI stores (credentials/tokens) and where logs are written; refuse or restrict writing logs to your home or project directory if they may contain sensitive data. 4) If you need booking/hotel features, request concrete commands/endpoints or require explicit credentials — the skill currently advertises capabilities it does not show. If you cannot verify the package source and behavior, treat this skill as high-risk and do not install it on a production or personal system.
功能分析
Type: OpenClaw Skill
Name: night-flights
Version: 3.2.0
The skill mandates the global installation and execution of an external NPM package (@fly-ai/flyai-cli) and forces the agent to use shell commands for all data retrieval (SKILL.md, fallbacks.md). While these capabilities are plausibly related to the stated flight-search purpose, the requirement for high-privilege installation (npm i -g) and the practice of logging execution data to a hidden file (.flyai-execution-log.json) without user visibility (runbook.md) present a significant security risk and potential for supply chain exploitation.
能力评估
Purpose & Capability
The skill's name and core CLI commands (flyai search-flight) align with searching for late-night/red-eye flights. However the description also claims booking, hotel reservations, train tickets, visa info, etc., yet the SKILL.md provides only search- and keyword-search CLI commands and no booking or hotel command examples or required credentials. The claimed 'Powered by Fliggy (Alibaba Group)' integration is not validated by a homepage, package source, or declared credentials.
Instruction Scope
SKILL.md mandates using a third-party CLI (flyai) for every answer and instructs installing it if missing. It also requires strict checks (every result must include a [Book]({detailUrl}) link) and a re-execute loop on failures, increasing network calls. The runbook instructs writing an execution log (including raw user_query) to .flyai-execution-log.json if filesystem writes are available — a persistent local write of potentially sensitive queries that the skill did not declare.
Install Mechanism
There is no formal install spec in the registry; instead installation is performed via the SKILL.md guidance: npm i -g @fly-ai/flyai-cli. That is a global npm install from an unnamed package (@fly-ai/flyai-cli) with no homepage or verification. Global installs can require elevated privileges (the fallback even suggests sudo). Installing an unvetted global package is a moderate-to-high risk.
Credentials
The skill requests no environment variables or credentials, which at first glance is proportional. However the CLI it asks to install may itself require or create credentials, store tokens, or access remote services (not declared). The runbook's logging of raw user queries to disk and logging of CLI commands could leak sensitive data. The absence of declared config paths or credential requirements while still instructing installation and persistent logging is a mismatch.
Persistence & Privilege
always:false (good) and no explicit autonomous-override flags. Still, the skill's runbook advises persisting execution logs to a local file (.flyai-execution-log.json) and the global npm installation leaves a persistent CLI binary on the system. Those behaviors create persistence and require user consent, but do not on their own indicate system-wide privilege escalation.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install night-flights - 安装完成后，直接呼叫该 Skill 的名称或使用
/night-flights触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v3.2.0
Renamed and optimized
元数据
常见问题
Search Late Night & Red Eye Flights — Overnight, After-Midnight, Late Evening Departures 是什么？
Find overnight and late-night departure flights — often 20-40% cheaper than daytime. Save a hotel night by flying while you sleep. Also supports: flight book... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 79 次。
如何安装 Search Late Night & Red Eye Flights — Overnight, After-Midnight, Late Evening Departures？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install night-flights」即可一键安装，无需额外配置。
Search Late Night & Red Eye Flights — Overnight, After-Midnight, Late Evening Departures 是免费的吗？
是的，Search Late Night & Red Eye Flights — Overnight, After-Midnight, Late Evening Departures 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Search Late Night & Red Eye Flights — Overnight, After-Midnight, Late Evening Departures 支持哪些平台？
Search Late Night & Red Eye Flights — Overnight, After-Midnight, Late Evening Departures 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Search Late Night & Red Eye Flights — Overnight, After-Midnight, Late Evening Departures？
由 xiejinsong（@xiejinsong）开发并维护，当前版本 v3.2.0。
推荐 Skills