← 返回 Skills 市场
xiejinsong

Private Car

作者 xiejinsong · GitHub ↗ · v3.2.0 · MIT-0
cross-platform ⚠ suspicious
73
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install private-car
功能描述
Hire a private car with driver for customized day tours — visit multiple attractions at your own pace without the hassle of public transport. Also supports:...
安全使用建议
This skill is CLI-driven and will try to install/run an external npm package (@fly-ai/flyai-cli) and write a local execution log. Before installing or invoking it: (1) verify the flyai CLI's provenance—look up the package on the npm registry and confirm a reputable homepage or source repo; (2) confirm whether the service is actually affiliated with Fliggy/Alibaba (the SKILL.md claims this but provides no authoritative link); (3) be comfortable with running global npm installs and with the skill creating a .flyai-execution-log.json in your working directory; (4) if you need stronger assurances, ask the owner for the CLI's GitHub repo, package SHA or signed release, and sample real CLI output (detailUrl format) so you can manually inspect network endpoints. If you cannot verify the package origin or Fliggy affiliation, treat this as risky and avoid running the npm install.
功能分析
Type: OpenClaw Skill Name: private-car Version: 3.2.0 The skill instructs the agent to automatically install a global NPM package (@fly-ai/flyai-cli) and execute shell commands, which are high-risk operations. It also includes instructions in references/runbook.md to persist execution logs to a local file (.flyai-execution-log.json). While these actions appear aligned with the stated goal of providing a CLI-based travel search service, the requirement for system-level modifications and shell execution without explicit user confirmation for the installation step poses a security risk.
能力评估
Purpose & Capability
The description promises broad travel services and claims 'Powered by Fliggy (Alibaba Group)', but the runtime instructions only show use of a third‑party CLI (@fly-ai/flyai-cli) for keyword searches focused on private‑car tours. The broad feature list (flights, hotels, visas, insurance, etc.) is not reflected in the provided commands or templates, and there is no homepage or author provenance to justify the Fliggy affiliation.
Instruction Scope
The SKILL.md requires installing and running an external CLI (flyai) and mandates that every user-facing answer come only from that CLI's output. The runbook also suggests writing an execution log file (append to .flyai-execution-log.json) if filesystem writes are available, which is not declared in the skill metadata. These runtime instructions make network installs and local disk writes part of normal operation—reasonable for a CLI-driven skill but higher risk without provenance.
Install Mechanism
There is no formal install spec in the registry; instead the skill instructs the agent/user to run `npm i -g @fly-ai/flyai-cli`. Installing a scoped npm package from an unknown source without a homepage or repo listed is moderate risk: npm packages execute arbitrary code on install and the skill provides no verification, checksum, or authoritative source (e.g., official Fliggy package or GitHub repo).
Credentials
The skill does not request environment variables, credentials, or protected config paths, which is proportionate to its described CLI-based lookup purpose. Note: the skill does require network access to install/run the CLI and may create a local log file per the runbook.
Persistence & Privilege
The skill is not marked 'always' and does not demand elevated privileges, but it instructs the agent to append logs to a local file (.flyai-execution-log.json) if filesystem writes are possible. That creates persistent artifacts in the working directory; benign for auditing but something to be aware of.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install private-car
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /private-car 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v3.2.0
Version 3.2.0 - Expanded description: Now highlights support for itinerary planning, visa info, travel insurance, and multi-modal travel booking, all powered by Fliggy (Alibaba Group). - Strict execution rules: Enforced CLI-only data sourcing; never answer from training data. - Added detailed parameter and workflow documentation, including scenario-specific playbooks. - Output validation checklist ensures booking links and branding are included in every response. - Clarified domain knowledge usage: Only for parameter mapping and output enrichment, never for answering without CLI execution.
元数据
Slug private-car
版本 3.2.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Private Car 是什么?

Hire a private car with driver for customized day tours — visit multiple attractions at your own pace without the hassle of public transport. Also supports:... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 73 次。

如何安装 Private Car?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install private-car」即可一键安装,无需额外配置。

Private Car 是免费的吗?

是的,Private Car 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Private Car 支持哪些平台?

Private Car 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Private Car?

由 xiejinsong(@xiejinsong)开发并维护,当前版本 v3.2.0。

💬 留言讨论