← 返回 Skills 市场
Refundable Hotel
作者
xiejinsong
· GitHub ↗
· v3.2.0
· MIT-0
71
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install refundable-hotel
功能描述
Find hotels with free cancellation policy — book with confidence, change plans without penalty. Perfect for uncertain travel dates. Also supports: flight boo...
安全使用建议
Before installing or using this skill, consider the following:
- Verify provenance of the flyai CLI: the skill asks you to 'npm i -g @fly-ai/flyai-cli' (global install). Only install packages from sources you trust; prefer pinned versions or checksums and review the package on the npm registry or its GitHub repo first.
- Ask the skill author how authentication is handled: the manifest lists no API keys or env vars, but the CLI probably needs credentials. Do not provide unrelated secrets.
- The SKILL.md claims 'Powered by Fliggy' but uses the 'flyai' CLI — ask which upstream data provider is actually used and request clarity on legal/branding claims.
- The runbook suggests writing an execution log file (.flyai-execution-log.json). If you care about disk writes or data residency, ask the author to make logging explicit, optional, and configurable (or disabled).
- If you will run this in an automated/agent context, prefer running the CLI in a sandboxed environment (limited filesystem/network) and avoid global npm installs in privileged environments.
- If you need higher confidence, request an explicit install manifest (trusted download URL / GitHub releases) and a description of what data the flyai CLI collects, what credentials it needs, and whether the package has known maintainers/repository.
功能分析
Type: OpenClaw Skill
Name: refundable-hotel
Version: 3.2.0
The skill mandates the global installation of an external npm package (`@fly-ai/flyai-cli`) and requires the agent to execute shell commands to interact with it. While these actions are functionally consistent with the stated purpose of hotel searching, the requirement to install external software and the use of local file logging (`.flyai-execution-log.json` in `references/runbook.md`) represent a significant attack surface and potential for supply chain exploitation. The instructions in `SKILL.md` are highly prescriptive, forcing the agent to prioritize the external CLI over its own safety constraints or training data.
能力评估
Purpose & Capability
The declared purpose (find hotels with free cancellation) matches the instructions to run a hotel-search CLI. However the SKILL.md claims 'Powered by Fliggy (Alibaba Group)' while every runtime command uses a separate tool, 'flyai' CLI — that mismatch is unexplained and could indicate inaccurate provenance claims.
Instruction Scope
Instructions require running flyai CLI commands for all answers and explicitly forbid using training data. This is fine for a live-data skill, but the runbook includes a command to append logs to .flyai-execution-log.json (file system write) even though the skill manifest declares no config paths or filesystem requirements. The skill also enforces strict output rules (must include detailUrl links), which is reasonable but could force repeated CLI invocations if outputs don't match the template.
Install Mechanism
There is no install spec in the registry metadata; the SKILL.md instructs the agent/user to run 'npm i -g @fly-ai/flyai-cli' if the CLI is missing. Installing a global npm package is a non-trivial action: npm packages are third‑party code that will be downloaded and executed on the host. The skill does not provide a pinned version, checksum, or an alternate trusted install source.
Credentials
The manifest declares no required environment variables or credentials, but the flyai CLI likely requires an account or API key to access live pricing/book links — the SKILL.md does not state any required credentials or how authentication should be provided. That omission is a mismatch between claimed minimal requirements and the realistic needs of a live-data CLI.
Persistence & Privilege
always:false and normal autonomous invocation are expected. However the runbook explicitly suggests persisting an execution log by appending to '.flyai-execution-log.json' if filesystem writes are available. The manifest did not declare any config paths; persistent logging to the working directory is a form of persistence that should be disclosed.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install refundable-hotel - 安装完成后，直接呼叫该 Skill 的名称或使用
/refundable-hotel触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v3.2.0
- Enforced strict CLI-only data sourcing; all hotel info must come from the flyai CLI, never from training data.
- Added a mandatory validation step requiring every hotel result to include a `[Book]({detailUrl})` link.
- Expanded description to highlight support for flights, trains, car rentals, attractions, insurance, and visas—all via Fliggy.
- Updated activation logic and trigger keywords for English and Chinese regarding free cancellation search.
- Clarified full step-by-step command execution workflow, CLI parameter usage, and strict output formatting requirements.
- Included references to detailed templates, scenario playbooks, and failure handling documentation.
元数据
常见问题
Refundable Hotel 是什么？
Find hotels with free cancellation policy — book with confidence, change plans without penalty. Perfect for uncertain travel dates. Also supports: flight boo... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 71 次。
如何安装 Refundable Hotel？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install refundable-hotel」即可一键安装，无需额外配置。
Refundable Hotel 是免费的吗？
是的，Refundable Hotel 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Refundable Hotel 支持哪些平台？
Refundable Hotel 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Refundable Hotel？
由 xiejinsong（@xiejinsong）开发并维护，当前版本 v3.2.0。
推荐 Skills