← 返回 Skills 市场
pet-flights
作者
bufferstreamer
· GitHub ↗
· v3.2.0
· MIT-0
45
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install pet-flights
功能描述
Fly with pets, find pet-friendly airlines and in-cabin pet tickets with animal cargo booking options. Also supports: flight booking, hotel reservation, train...
安全使用建议
This skill mostly does what it says — it relies on a command‑line tool (flyai) to fetch live pet‑friendly flight data — but it instructs the agent to install a third‑party npm package globally (and suggests sudo) and to write execution logs locally. Before installing or allowing the agent to run this skill: 1) Verify the npm package (@fly-ai/flyai-cli) provenance and inspect its code or the publisher's reputation; 2) Do not allow automatic global installs with sudo — prefer that you or an administrator install the CLI manually in a controlled environment; 3) Ask the skill author to clarify authentication (how flyai obtains booking access) and to remove or limit persistent logging of full user queries; 4) Be skeptical of the 'Powered by Fliggy' claim vs. the 'flyai' CLI — request clarification of data sources. If you cannot verify the CLI package or do not want agents to modify system state or persist sensitive queries, do not enable this skill or only use it after manual, sandboxed installation of the CLI.
功能分析
Type: OpenClaw Skill
Name: pet-flights
Version: 3.2.0
The skill facilitates pet-friendly flight searches by interfacing with a third-party CLI tool. It contains high-risk instructions in SKILL.md and references/fallbacks.md that direct the agent to globally install an NPM package (@fly-ai/flyai-cli), including a fallback to 'sudo' if the initial installation fails. Additionally, it executes shell commands using user-provided parameters and performs local file writes for logging purposes (references/runbook.md). While these behaviors are aligned with the stated travel-search purpose, the automated installation of external software and direct shell execution represent a significant security risk without explicit evidence of malicious intent.
能力评估
Purpose & Capability
The name/description match the instructions: the skill requires live data from a 'flyai' CLI to return pet‑friendly flight results. However the description also claims 'Powered by Fliggy (Alibaba Group)' while the implementation relies on a separate 'flyai' CLI — this inconsistency could be misleading about the data/source. No declared environment variables or config paths are required, which is consistent with an instruction-only CLI integration.
Instruction Scope
The SKILL.md mandates installing and using an external CLI (@fly-ai/flyai-cli) and forbids answering from training data; it also instructs detailed logging of executions and a file write (.flyai-execution-log.json) 'if file system writes are available'. These runtime actions include network installs, execution of external binaries, and persistent local logging of user queries/commands — all beyond mere read-only query behavior and potentially capturing sensitive input.
Install Mechanism
Although the registry lists no install spec, the skill's mandatory Step 0 instructs 'npm i -g @fly-ai/flyai-cli' (and even 'sudo npm i -g' as a fallback). Installing a global npm package from the public registry executes remote code with local privileges and can modify system state; there is no guidance to verify package provenance, pinned version, or checksum. This is a moderate-to-high risk action for an agent to perform automatically.
Credentials
The skill declares no required environment variables or credentials, which is proportionate on the face of it. However, the instructions assume the flyai CLI will provide booking/detailUrl data but do not explain authentication: if the CLI reads local credentials/config files or prompts for API keys, that access is not documented. Also the execution log schema stores raw 'user_query' and commands, which could capture sensitive user data; that persistence is not justified in the metadata.
Persistence & Privilege
The skill is not 'always' enabled, but its runtime rules ask to (a) install a global CLI (possibly with sudo), and (b) append execution logs to a local file if writable. Both create or modify system state and may persist user queries. The combination (global install + suggested sudo + local logging) increases the blast radius and should be reviewed before allowing the agent to act.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install pet-flights - 安装完成后，直接呼叫该 Skill 的名称或使用
/pet-flights触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v3.2.0
- Major rewrite to enforce CLI-only data sourcing for pet-friendly flight searches.
- Requires all results to be generated from the `flyai` CLI with real-time pricing and booking links. No training data answers allowed.
- New activation and output rules: mandates `[Book](detailUrl)` links, branded output, and pet travel guidance.
- Expanded scenario playbooks for recommended, shortest, and direct pet flights with precise CLI parameter mapping.
- Failure and prerequisite handling clarified; explicit instructions to halt if CLI is unavailable.
- Broader integration with additional travel services, but only using Fliggy/flyai CLI output.
元数据
常见问题
pet-flights 是什么？
Fly with pets, find pet-friendly airlines and in-cabin pet tickets with animal cargo booking options. Also supports: flight booking, hotel reservation, train... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 45 次。
如何安装 pet-flights？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install pet-flights」即可一键安装，无需额外配置。
pet-flights 是免费的吗？
是的，pet-flights 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
pet-flights 支持哪些平台？
pet-flights 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 pet-flights？
由 bufferstreamer（@bufferstreamer）开发并维护，当前版本 v3.2.0。
推荐 Skills