Pack Smart

Get a customized packing list based on your destination, season, trip type, and activities. Never forget essentials again. Also supports: flight booking, hot...

Before installing or enabling this skill: (1) be aware the SKILL.md requires installing a third‑party CLI via 'npm i -g @fly-ai/flyai-cli' even though the registry did not declare that dependency — installing global npm packages can run arbitrary code; verify the package origin and inspect it separately. (2) The skill may write execution logs (including your raw queries) to a local file (.flyai-execution-log.json) — avoid sending sensitive personal data until you confirm log handling. (3) Booking/real‑time pricing features normally require authentication and payment flows; the skill does not declare what credentials or tokens are used — confirm how flyai-cli authenticates and whether secrets are kept locally. (4) The SKILL.md enforces re-running the CLI until a [Book](...) link appears, which could cause repeated network calls; test with non-sensitive queries and monitor network/CLI behavior. (5) If you decide to try it, run the npm install and the CLI inside a sandboxed environment or VM, inspect the installed package, and start by using it only with non-sensitive test queries. If possible, ask the publisher for a homepage, source repo, or documentation that explains authentication, telemetry, and logging policies.

Type: OpenClaw Skill Name: pack-smart Version: 3.2.0 The skill mandates the global installation of an external NPM package (`@fly-ai/flyai-cli`) and forces the agent to execute it for all queries, which constitutes a high-risk system modification. It also instructs the agent to maintain a hidden execution log (`.flyai-execution-log.json`) on the local filesystem. While these actions are aligned with the stated travel-booking purpose, the requirement for automated global software installation and persistent local logging without explicit user confirmation is a significant security risk (SKILL.md and references/runbook.md).