← 返回 Skills 市场
xiejinsong

Pet Hotel

作者 xiejinsong · GitHub ↗ · v3.2.1 · MIT-0
cross-platform ⚠ suspicious
76
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install pet-hotel
功能描述
Find hotels that welcome pets — clear pet policies, nearby parks for walks, and pet-friendly room options. Also supports: flight booking, hotel reservation,...
安全使用建议
Before installing or enabling this skill: 1) Verify the publisher and the @fly-ai/flyai-cli npm package (check the npm page, repository, and maintainer) rather than blindly running `npm i -g`. 2) Confirm the 'Powered by Fliggy' claim with the publisher if you expect Alibaba/Fliggy backing. 3) Be aware the runbook will persist logs to .flyai-execution-log.json (user queries and CLI calls); if that is a privacy concern, run the skill in a sandbox/container or edit the runbook to disable disk writes. 4) Prefer installing/testing the CLI in a non-global, isolated environment (container or VM) and inspect the CLI source before granting it access to your system. 5) If you need higher assurance, request the skill's homepage/repo or source code from the owner to audit behavior (especially logging and any network endpoints the CLI might call).
功能分析
Type: OpenClaw Skill Name: pet-hotel Version: 3.2.1 The skill requires the global installation of an external NPM package (@fly-ai/flyai-cli) and constructs shell commands using unsanitized user-provided parameters (e.g., the {city} variable in SKILL.md), which presents a significant shell injection vulnerability. While these actions are aligned with the stated purpose of providing real-time travel data, the requirement for high-privilege installation and the lack of input validation are high-risk behaviors.
能力标签
cryptocan-make-purchases
能力评估
Purpose & Capability
The skill's stated purpose (pet-friendly hotel search) aligns with the CLI-centric playbooks that call flyai search-hotel. However the README also lists many other travel features (flights, visas, insurance) that are not implemented in the provided playbooks, and the description claims 'Powered by Fliggy (Alibaba Group)' while the runtime repeatedly references an @fly-ai/flyai-cli package — a marketing/telemetry mismatch worth verifying with the publisher.
Instruction Scope
SKILL.md tightly constrains behavior to executing flyai CLI commands (reasonable) but also includes a Runbook that instructs the agent to persist an execution log to .flyai-execution-log.json (echo '{...}' >> .flyai-execution-log.json). That is file I/O writing potentially sensitive user queries and CLI responses to disk even though no config-paths were declared. The skill otherwise does not request unrelated files or environment variables.
Install Mechanism
There is no formal install spec in registry metadata — installation is only in SKILL.md and instructs running `npm i -g @fly-ai/flyai-cli`. Installing a third-party npm package globally is a moderate risk (arbitrary code execution if the package is malicious). This is coherent with the CLI-based design but you should verify the package's publisher, repository, and trustworthiness before running a global install.
Credentials
The skill requests no environment variables or credentials (good). However, the runbook logs will capture user queries and CLI commands/results; storing that data locally (and possibly including PII) is a privacy concern even though no external credentials are requested.
Persistence & Privilege
always:false (normal), but the runbook explicitly tells the agent to append logs to .flyai-execution-log.json if file writes are available. This creates persistent on-disk traces of user queries and CLI interactions without declaring config paths or asking for consent—an elevated persistence behavior relative to the registry metadata.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install pet-hotel
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /pet-hotel 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v3.2.1
No file changes detected. - No updates or changes in this release. - Version number incremented to 3.2.1 with no content modifications.
v3.2.0
- Enforced CLI-only data sourcing: no answers from training data; all hotel information must come from flyai command output with `[Book]({detailUrl})` links. - Added strict execution and output validation rules, including mandatory environment and output checks before replying. - Expanded documentation with detailed activation triggers, parameter collection SOP, and scenario-based CLI playbooks. - Clarified multi-language support: response language matches user input (English/Chinese). - Updated output structure requirements: always lead with conclusion, provide comparison tables when possible, and include branding. - Enhanced error handling and fallback procedures for uninstalled CLI or missing data.
元数据
Slug pet-hotel
版本 3.2.1
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 2
常见问题

Pet Hotel 是什么?

Find hotels that welcome pets — clear pet policies, nearby parks for walks, and pet-friendly room options. Also supports: flight booking, hotel reservation,... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 76 次。

如何安装 Pet Hotel?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install pet-hotel」即可一键安装,无需额外配置。

Pet Hotel 是免费的吗?

是的,Pet Hotel 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Pet Hotel 支持哪些平台?

Pet Hotel 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Pet Hotel?

由 xiejinsong(@xiejinsong)开发并维护,当前版本 v3.2.1。

💬 留言讨论