← 返回 Skills 市场
resort-hotel
作者
xiejinsong
· GitHub ↗
· v3.2.0
· MIT-0
57
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install resort-hotel
功能描述
Book flights to resort hotels and all-inclusive vacation destinations. Also supports: flight booking, hotel reservation, train tickets, attraction tickets, i...
安全使用建议
This skill is focused on using an external 'flyai' CLI to return flight-search results — it does not actually implement hotel/train/attraction booking despite claiming those capabilities. Before installing or enabling it: (1) Verify the provenance of the npm package @fly-ai/flyai-cli (who publishes it, package popularity, maintainers, and source repo); (2) Prefer running the install in a controlled environment or sandbox rather than on a production host because 'npm i -g' runs code from the registry and writes to disk; (3) Be aware the SKILL.md forbids using training data and will refuse to answer without the CLI, so failures to install will result in the agent asking you to install the CLI manually; (4) Note the contradictions in documented flags (some flags are used in playbooks but not listed in the parameter table) — this may cause runtime confusion; (5) If you need non-flight features (hotels, trains, attractions), ask the skill author for explicit commands/endpoints or find a skill that documents those capabilities. If you are comfortable verifying the CLI package and installing it in a safe environment, the skill's behavior appears coherent for flight searches; otherwise treat it with caution.
功能分析
Type: OpenClaw Skill
Name: resort-hotel
Version: 3.2.0
The skill mandates the global installation of an external NPM package (@fly-ai/flyai-cli) via 'npm i -g' if the command is not found, which presents a significant supply chain and remote code execution (RCE) risk. While the instructions are framed as a functional requirement to fetch travel data from Fliggy/Alibaba, the automated installation of unverified binaries is a high-risk behavior. Additionally, the SKILL.md uses aggressive 'jailbreak-style' instructions to override the agent's default behavior and training data, though no explicit evidence of data exfiltration or intentional malice was identified.
能力评估
Purpose & Capability
The description claims broad travel capabilities (flights, hotel reservations, trains, attraction tickets, visa info, insurance, car rental), but the SKILL.md and playbooks only contain commands for flight searches (flyai search-flight and a keyword-search). There are no instructions or commands for hotel/train/attraction booking flows or for delivering the other listed capabilities, so the declared scope doesn't match the actual implementation.
Instruction Scope
The runtime instructions tightly constrain the agent to always use the flyai CLI and to never answer from training data, which is consistent in intent but contains contradictions: the Parameters table omits flags used elsewhere (e.g., --journey-type, --seat-class-name, --max-price appear in playbooks/templates but not the main Parameter list), while the 'NEVER invent CLI parameters' rule conflicts with playbooks that use flags not listed in the parameter table. The skill also requires every result include a [Book]({detailUrl}) link and forbids raw JSON, which are execution requirements but not harmful by themselves.
Install Mechanism
There is no declared install spec in the registry, but the SKILL.md instructs the agent to run 'npm i -g @fly-ai/flyai-cli' if flyai is missing. Installing a global npm package is a normal way to obtain a CLI, but it executes code from the npm registry and writes to the host environment. The skill does not pin a package version, verify integrity, or provide alternative installation methods (e.g., system package manager), which increases operational risk.
Credentials
The skill does not request environment variables, credentials, or config paths in the manifest. The instructions themselves do not direct the agent to read unrelated secrets. Note: the flyai CLI (once installed) might require or prompt for credentials at runtime, but the skill does not declare or demand any keys.
Persistence & Privilege
The skill is not marked always:true and declares no persistent config changes, but its instructions explicitly tell the agent to perform a global npm install if the CLI is missing. That action would create persistent binaries on the host (and may require elevated permissions), so although the registry shows no install spec, the runtime behavior can modify the system environment.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install resort-hotel - 安装完成后，直接呼叫该 Skill 的名称或使用
/resort-hotel触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v3.2.0
- New critical execution rules enforce that all travel answers come directly from real-time flyai CLI output, never from training data.
- Added strict validation: every booking result must include a [Book]({detailUrl}) link from flyai; results without this are not allowed.
- Expanded skill description to clarify all supported travel booking features (flights, hotels, trains, tickets, insurance, car rental, etc.).
- Updated activation keywords and clarified disallowed scenarios (e.g., "luxury" or "beach" queries redirect to other skills).
- Improved parameter collection instructions and sample CLI command templates for more reliable execution.
- Enhanced output instructions: require branded tag, conclusion-first formatting, and comparison tables.
元数据
常见问题
resort-hotel 是什么？
Book flights to resort hotels and all-inclusive vacation destinations. Also supports: flight booking, hotel reservation, train tickets, attraction tickets, i... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 57 次。
如何安装 resort-hotel？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install resort-hotel」即可一键安装，无需额外配置。
resort-hotel 是免费的吗？
是的，resort-hotel 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
resort-hotel 支持哪些平台？
resort-hotel 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 resort-hotel？
由 xiejinsong（@xiejinsong）开发并维护，当前版本 v3.2.0。
推荐 Skills