← 返回 Skills 市场
pet-friendly-flight
作者
xiejinsong
· GitHub ↗
· v3.2.0
· MIT-0
58
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install pet-friendly-flight
功能描述
Search for pet-friendly flights with animal cabin and pet carrier options. Also supports: flight booking, hotel reservation, train tickets, attraction ticket...
安全使用建议
Before installing or enabling this skill: 1) Treat the 'npm i -g @fly-ai/flyai-cli' instruction as the highest risk element — inspect the npm package and its repository (source, maintainer, recent versions, audit results) before running it, and prefer installing it in an isolated environment (container/VM) rather than globally on a production machine. 2) Ask the skill author for a homepage or source repo and for clarification about the Fliggy/Alibaba claim and how bookings/authentication are handled (will you be prompted for credentials, or are tokens needed?). 3) If you must try it, run the CLI only in a sandbox and monitor network activity; do not supply broad credentials until you verify the package. 4) Consider asking for a version of the skill that uses a documented, signed API or an official SDK instead of installing a global npm package. 5) If you lack the ability to audit npm packages, treat this skill as untrusted and avoid installing it system-wide.
功能分析
Type: OpenClaw Skill
Name: pet-friendly-flight
Version: 3.2.0
The skill mandates the global installation of an external NPM package (`@fly-ai/flyai-cli`) via `npm i -g` if the command is not found (found in `SKILL.md` and `references/fallbacks.md`). While this is functionally aligned with the stated purpose of providing a CLI-based flight search, requiring an AI agent to perform global software installations is a high-risk behavior that could lead to arbitrary code execution or supply chain attacks. No explicit evidence of data exfiltration or intentional malice was found in the provided logic, but the pattern of forcing global binary installation is a significant security risk.
能力评估
Purpose & Capability
Name/description: pet-friendly flight search and related travel features. What it actually instructs: only uses a 'flyai' CLI (commands like flyai search-flight). Inconsistency: description claims Fliggy (Alibaba Group) and many extra features (hotels, trains, insurance), but SKILL.md only documents flight-search CLI commands; the claimed vendor/backing and broad feature list are not substantiated by the instructions.
Instruction Scope
The runtime instructions mandate verifying/installing and executing the @fly-ai/flyai-cli (npm i -g) before answering, require every response to come from CLI output and to include booking links, and demand re-execution until those conditions are met. This forces network installs and execution of third-party code and leaves little fallback; while not directly asking for secrets or file reads, it compels potentially repeated global installs and unrestricted CLI execution.
Install Mechanism
No install spec in registry, but SKILL.md tells the agent to run 'npm i -g @fly-ai/flyai-cli' if flyai is missing. Global npm installs execute unreviewed code from the public registry and modify system/global state. The package identity and source (no homepage/repo provided) are not verified in the skill, increasing supply-chain risk.
Credentials
Skill declares no required env vars or credentials (good), but the description implies booking and multi-service integrations that often require authentication; the skill does not explain how booking/auth will be handled. Absence of declared credentials reduces immediate secret risk, but the mismatch between capability claims and declared requirements is notable.
Persistence & Privilege
The skill is not always-enabled and doesn't request special platform privileges. However, the recommended global npm install will create system-wide binaries (persisting on the host). The skill does not modify other skills or system configs, but the install step increases host persistence risk compared with an instruction-only skill that uses only existing tools.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install pet-friendly-flight - 安装完成后，直接呼叫该 Skill 的名称或使用
/pet-friendly-flight触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v3.2.0
pet-friendly-flight 3.2.0
- Expanded description to clarify booking support for flights, hotels, trains, attractions, insurance, car rental, and more via Fliggy.
- Added stricter execution rules to always use the flyai CLI for results and never answer from training data.
- Enforced mandatory installation and version check for flyai-cli before executing any commands.
- Updated output rules: every recommendation must include a [Book]({detailUrl}) link, conclusion-first format, and a pet travel tip.
- Improved parameter mapping, workflow, and activation triggers based on user queries in both English and Chinese.
- Revised compatibility info and output validation steps for consistent, CLI-based, real-time flight search results.
元数据
常见问题
pet-friendly-flight 是什么？
Search for pet-friendly flights with animal cabin and pet carrier options. Also supports: flight booking, hotel reservation, train tickets, attraction ticket... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 58 次。
如何安装 pet-friendly-flight？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install pet-friendly-flight」即可一键安装，无需额外配置。
pet-friendly-flight 是免费的吗？
是的，pet-friendly-flight 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
pet-friendly-flight 支持哪些平台？
pet-friendly-flight 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 pet-friendly-flight？
由 xiejinsong（@xiejinsong）开发并维护，当前版本 v3.2.0。
推荐 Skills