← 返回 Skills 市场
nightlife-trip
作者
xiejinsong
· GitHub ↗
· v3.2.0
· MIT-0
57
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install nightlife-trip
功能描述
Book flights for nightlife trips featuring night markets and entertainment districts. Also supports: flight booking, hotel reservation, train tickets, attrac...
安全使用建议
This skill appears to be a thin wrapper around a third-party CLI (flyai). Before installing or enabling it: 1) Verify the provenance of the npm package @fly-ai/flyai-cli (check the package page, author, repository, and recent publish history on npm). 2) Prefer installing the CLI manually and inspecting it first rather than allowing the agent to run npm -g automatically—global installs can run arbitrary code. 3) Ask the skill author how authentication/booking is handled (does the CLI require user credentials or local config?) and where booking links resolve. 4) If you need tighter security, limit autonomous invocation or run the skill in a restricted/test environment. If you cannot verify the flyai package/source or the author, treat the skill as untrusted.
功能分析
Type: OpenClaw Skill
Name: nightlife-trip
Version: 3.2.0
The skill bundle instructs the agent to globally install an external npm package (@fly-ai/flyai-cli) and execute shell commands using user-provided parameters (e.g., --origin "{{o}}") in SKILL.md and references/playbooks.md. This pattern is highly susceptible to shell injection if the agent fails to sanitize inputs, and the automatic installation of third-party software poses a supply chain risk. While these actions are functionally consistent with the stated flight-booking purpose, they represent significant security vulnerabilities.
能力评估
Purpose & Capability
Name/description (book flights for nightlife trips) align with the SKILL.md: everything centers on running the 'flyai' CLI to search flights and format results. However the description cites 'powered by Fliggy (Alibaba Group)' while the runtime exclusively requires 'flyai' CLI; no details or credentials tying flyai to Fliggy are provided. That difference is unexplained but could be legitimate (third-party aggregator).
Instruction Scope
SKILL.md is strict and scoped: it requires every answer to come from the flyai CLI, forbids using training data, and only references CLI commands and its provided reference files. It does not instruct reading unrelated files or environment variables. It does, however, require re-running the CLI until a [Book]({detailUrl}) link is present which could cause repeated network calls.
Install Mechanism
No install spec is declared in the registry metadata, yet the SKILL.md instructs installing an npm package globally (npm i -g @fly-ai/flyai-cli) if flyai is missing. Global npm installs execute package install scripts from the public registry and write to disk; because the skill metadata provides no provenance (no homepage/source) this introduces a non-trivial supply-chain risk and is a mismatch between declared install behavior and metadata.
Credentials
The skill requests no environment variables or credentials in metadata, which is consistent with an instruction-only wrapper that relies on a CLI. However real booking flows often require authentication; the SKILL.md does not explain how auth is handled by the CLI or whether the user must provide credentials elsewhere. Absence of credential requests is not inherently wrong but leaves an unanswered question about where booking/auth happens.
Persistence & Privilege
The skill is not forced always-on, does not request special config paths, and does not modify other skills. Agent autonomous invocation is allowed (default), which is normal; nothing in the skill claims unusual persistence or elevated privileges.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install nightlife-trip - 安装完成后，直接呼叫该 Skill 的名称或使用
/nightlife-trip触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v3.2.0
Nightlife Trip Flights 3.2.0
- Expanded skill description to clarify coverage of night markets, entertainment districts, and additional travel services.
- Updated activation and exclusion rules for more precise triggering on nightlife-related queries.
- Improved output guidelines to require a summary, nightlife city tips, and a comparison table.
- Revised CLI execution and parameter mapping rules for stricter adherence to live data.
- Enhanced environment check and error-handling procedures for flyai CLI usage.
元数据
常见问题
nightlife-trip 是什么？
Book flights for nightlife trips featuring night markets and entertainment districts. Also supports: flight booking, hotel reservation, train tickets, attrac... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 57 次。
如何安装 nightlife-trip？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install nightlife-trip」即可一键安装，无需额外配置。
nightlife-trip 是免费的吗？
是的，nightlife-trip 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
nightlife-trip 支持哪些平台？
nightlife-trip 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 nightlife-trip？
由 xiejinsong（@xiejinsong）开发并维护，当前版本 v3.2.0。
推荐 Skills