← 返回 Skills 市场
remote-work-travel
作者
Yangki Zhang
· GitHub ↗
· v3.2.0
· MIT-0
43
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install remote-work-travel
功能描述
Book flights for remote work travel and workation destinations. Also supports: flight booking, hotel reservation, train tickets, attraction tickets, itinerar...
安全使用建议
This skill is instruction-only but tells the agent to globally install and run an external npm package (@fly-ai/flyai-cli) at runtime — the package's source and trustworthiness are not provided. Before installing: (1) verify the package on the npm registry and its linked source repository (GitHub/etc.), review maintainer and recent publish history; (2) confirm the relationship between 'flyai' and the claimed 'Fliggy (Alibaba Group)' branding; (3) prefer running such installs in a sandbox or container rather than on your primary machine because global npm installs run arbitrary code; (4) ask the skill author to supply a concrete install spec (trusted release URL, checksum, or repository) or to declare required binaries in the registry metadata; (5) if you cannot verify the package provenance, do not install — consider using an alternative travel integration with known, auditable tooling. Additional information that would change this assessment: a homepage/repository URL for the skill and for the @fly-ai/flyai-cli package, a vetted install spec (signed release or GitHub release), or registry metadata updated to declare the CLI requirement and its trusted source.
功能分析
Type: OpenClaw Skill
Name: remote-work-travel
Version: 3.2.0
The skill mandates the global installation of an external npm package (@fly-ai/flyai-cli) and executes shell commands using user-provided input for flight searches in SKILL.md and references/playbooks.md. While these capabilities are aligned with the stated travel booking purpose, the requirement for global software installation and the potential for shell injection via unsanitized parameters (e.g., --origin, --destination) represent significant security risks without evidence of malicious intent.
能力评估
Purpose & Capability
The skill claims to book travel (mentions being 'powered by Fliggy') but the SKILL.md mandates using a 'flyai' CLI and, if missing, installing @fly-ai/flyai-cli via npm. The registry metadata listed no required binaries or env vars, which contradicts the runtime instructions. The relationship between 'flyai' and the claimed Fliggy/Alibaba brand is unclear.
Instruction Scope
The runtime instructions force the agent to run the flyai CLI for every answer and to install a global npm package if the CLI is absent. This gives the skill the ability to pull and execute external code at runtime. The instructions do not ask for unrelated files or secrets, but they explicitly require network-based package installation and repeated CLI execution until a booking link appears.
Install Mechanism
There is no install spec in the registry, yet SKILL.md tells the agent to run `npm i -g @fly-ai/flyai-cli` when the CLI is missing. On-the-fly global npm installs are high-risk because they fetch and run code from a package registry with no provided repository/homepage or integrity checks. No vetted release URL or signature is provided.
Credentials
The skill does not request environment variables, config paths, or credentials in the registry metadata, and the SKILL.md does not reference secrets or unrelated env vars. The lack of declared credentials is coherent with the travel-booking purpose — however, the runtime npm install still alters the environment.
Persistence & Privilege
The skill does not request 'always: true', does not declare modifications to other skills or system-wide configs, and is user-invocable only. The primary concern is the transient privilege of installing/running a global CLI, not persistent platform-level privileges.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install remote-work-travel - 安装完成后，直接呼叫该 Skill 的名称或使用
/remote-work-travel触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v3.2.0
remote-work-travel 3.2.0 changelog:
- Updated and clarified skill execution rules, emphasizing strict CLI use and output validation.
- Expanded description to reflect all supported booking services (flights, hotels, trains, attractions, etc.).
- Detailed activation triggers and clarified exclusion scenarios.
- Added comprehensive parameter and playbook tables for different query intents.
- Improved output and formatting rules for concise, actionable responses.
- Strengthened environment check and installation instructions for CLI reliability.
元数据
常见问题
remote-work-travel 是什么？
Book flights for remote work travel and workation destinations. Also supports: flight booking, hotel reservation, train tickets, attraction tickets, itinerar... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 43 次。
如何安装 remote-work-travel？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install remote-work-travel」即可一键安装，无需额外配置。
remote-work-travel 是免费的吗？
是的，remote-work-travel 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
remote-work-travel 支持哪些平台？
remote-work-travel 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 remote-work-travel？
由 Yangki Zhang（@ivan97）开发并维护，当前版本 v3.2.0。
推荐 Skills