← 返回 Skills 市场
xiejinsong

Pool Hotel

作者 xiejinsong · GitHub ↗ · v3.2.0 · MIT-0
cross-platform ⚠ suspicious
69
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install pool-hotel
功能描述
Find hotels with swimming pools — indoor heated pools, outdoor infinity pools, rooftop pools, and kid-friendly splash areas. Also supports: flight booking, h...
安全使用建议
This skill is instruction-only and largely coherent for hotel searches, but proceed cautiously. Key things to consider before installing or using it: 1) The skill asks you (or the agent) to npm i -g @fly-ai/flyai-cli — verify the package on the npm registry and review its source code before installing globally (prefer sandboxed testing). 2) The description promises many travel features beyond hotel search, but the SKILL.md only documents hotel CLI commands — ask the author to clarify or provide proof for other capabilities. 3) The skill may persist execution logs (including user queries) to .flyai-execution-log.json — confirm retention policy and sanitize sensitive data. 4) The strict ‘must come from CLI’ and ‘must include [Book]’ rules may cause the agent to repeatedly retry commands; consider rate limits and cost/latency implications. 5) If you need stronger assurance, request the skill owner’s homepage/source repo or ask for an explicit install spec (trusted release URL, checksum, and minimal-permission install instructions) or run the CLI in an isolated environment first.
功能分析
Type: OpenClaw Skill Name: pool-hotel Version: 3.2.0 The skill bundle mandates the global installation of an external NPM package (@fly-ai/flyai-cli) and uses forceful instructions to override agent behavior, requiring it to ignore training data in favor of CLI output (SKILL.md). Additionally, it directs the agent to write logs to the local filesystem (references/runbook.md). These patterns represent high-risk behaviors and potential supply chain vulnerabilities, as they force the execution of unverified third-party code and bypass standard agent safety constraints.
能力评估
Purpose & Capability
The skill description claims broad travel capabilities (flight booking, train tickets, attractions, visa info, travel insurance, car rental) but the SKILL.md and playbooks only define hotel-related flyai CLI commands and fallbacks. There is a mismatch between the advertised scope and the actual instructions, which suggests either incomplete documentation or overstated capabilities.
Instruction Scope
The runtime instructions force every answer to come from the flyai CLI and explicitly forbid using training data. They require installing @fly-ai/flyai-cli if absent and mandate re-execution until results include a [Book]({detailUrl}) link. This creates a risk of repeated CLI calls/loops if results don't match the strict checks. The runbook also instructs persisting logs (including raw user_query) to a local file when filesystem writes are available, which raises privacy/persistence concerns.
Install Mechanism
Although the registry contains no install spec, SKILL.md tells the agent to run npm i -g @fly-ai/flyai-cli. Requiring a global npm package install at runtime is a moderate risk: npm packages run arbitrary code during install and execution and the package origin and trustworthiness are not documented here. The skill does not provide a vetted release URL, checksum, or source repo to validate the package.
Credentials
The skill requests no environment variables or credentials (good), but the flyai CLI could require authentication or prompt for tokens at runtime (not documented). The runbook log can capture and persist user queries and CLI outputs to disk, so sensitive user data could be stored even though no explicit credential access is requested.
Persistence & Privilege
The skill does not request always:true and is user-invocable, which is fine. However, it instructs writing an execution log to .flyai-execution-log.json if filesystem writes are available, persisting request_id, user_query, commands, and possibly CLI outputs. This local persistence of possibly sensitive data is a notable privilege and privacy risk.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install pool-hotel
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /pool-hotel 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v3.2.0
- Major update: strict execution rules and detailed workflow for finding hotels with pools using flyai CLI only. - CLI execution is now mandatory for all queries; never answer from training data. - Booking links ([Book]({detailUrl})) are required in every response. - Expanded support: also handles flight, train, car rental, insurance, visas, and attractions via Fliggy. - Comprehensive parameter table and clear output formatting guidelines added. - Robust troubleshooting and fallback instructions included for improved reliability.
元数据
Slug pool-hotel
版本 3.2.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Pool Hotel 是什么?

Find hotels with swimming pools — indoor heated pools, outdoor infinity pools, rooftop pools, and kid-friendly splash areas. Also supports: flight booking, h... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 69 次。

如何安装 Pool Hotel?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install pool-hotel」即可一键安装,无需额外配置。

Pool Hotel 是免费的吗?

是的,Pool Hotel 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Pool Hotel 支持哪些平台?

Pool Hotel 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Pool Hotel?

由 xiejinsong(@xiejinsong)开发并维护,当前版本 v3.2.0。

💬 留言讨论