← 返回 Skills 市场
Return Flights
作者
xiejinsong
· GitHub ↗
· v3.2.0
· MIT-0
77
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install return-flights
功能描述
Search and compare round-trip flights with return date. Shows total cost for both legs, compares bundled vs separate booking to find the cheapest combination...
安全使用建议
Before installing or using this skill: 1) Verify the publisher and obtain the flyai-cli package repository (GitHub/npm package page) and inspect its code or the package maintainer — do not blindly run npm i -g without verification. 2) Prefer installing the CLI in a sandbox or local (non-global) environment; avoid using sudo. 3) Ask the skill author to explain the Fliggy/Alibaba branding and provide a homepage or source repo — the current metadata lacks provenance. 4) Be aware the skill's runbook instructs writing a local log file (.flyai-execution-log.json) that will store user queries and CLI responses (possible PII); decide if that is acceptable. 5) If you need assurance, request the skill be updated to: a) include a verified package URL and checksum; b) avoid global/sudo installs or provide a contained install option; c) declare and make explicit any local persistence; and d) remove the directive that forbids answering from training data (or explain why). Providing the package source or example CLI outputs would materially change this assessment.
功能分析
Type: OpenClaw Skill
Name: return-flights
Version: 3.2.0
The skill mandates the automatic global installation of an external NPM package (`@fly-ai/flyai-cli`) and the execution of CLI commands. While these actions are functionally aligned with the flight-search purpose, the instruction in SKILL.md and references/fallbacks.md to perform a global installation (`npm i -g`) without prior user confirmation is a high-risk behavior. No evidence of data exfiltration or intentional malice was found, but the broad execution permissions and 'install-first' logic represent a significant security risk.
能力评估
Purpose & Capability
The SKILL.md's commands consistently target a CLI called flyai (npm package @fly-ai/flyai-cli) to search and compare round-trip flights, which aligns with the stated primary purpose. However, the top-level description also advertises many extra services (hotel, train, visa, travel insurance, 'Powered by Fliggy (Alibaba Group)') that are not demonstrated or justified in the instructions; the branding (Fliggy) does not match the flyai CLI shown in commands. This mismatch is unexplained.
Instruction Scope
The instructions mandate always using the flyai CLI and explicitly forbid answering from training data, forcing installation if missing. The runbook instructs writing an execution log to .flyai-execution-log.json (echo '... >> .flyai-execution-log.json') which persists user queries and CLI results locally. The skill also enforces output rules (book links, brand tag) and a self-test that could cause repeated CLI re-execution if not satisfied. These behaviors expand scope beyond just looking up flights (local persistence, install steps, re-execution loops).
Install Mechanism
No formal install spec is included in registry metadata, but SKILL.md instructs installing a global npm package (npm i -g @fly-ai/flyai-cli) and even suggests sudo as a fallback. Installing arbitrary global npm packages carries risk (runs code from the npm registry with broad access). The skill does not provide a verified source URL, package checksum, or repository to validate the package's origin or contents.
Credentials
The skill requests no environment variables or external credentials in metadata. However, it will process and persist user queries and CLI JSON results (potentially including personal data) to a local log file per the runbook. There are no explicit requests for unrelated secrets, which is good, but the implicit data persistence was not declared in the registry metadata.
Persistence & Privilege
always:false (normal). Still, the runbook prescribes creating a persistent execution log file (.flyai-execution-log.json) if filesystem writes are available. The skill does not declare or explain this file in metadata or request explicit user consent. The installer recommendation to run npm -g (and sudo fallback) increases privilege requirements for operation.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install return-flights - 安装完成后，直接呼叫该 Skill 的名称或使用
/return-flights触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v3.2.0
- Greatly expanded CLI-based workflow instructions and strict step-by-step procedures for round-trip flight searches.
- Added critical execution rules: all data must come from real-time flyai CLI outputs (never from previous knowledge or training data).
- Detailed parameter table, scenario-specific playbooks, and output formatting rules included.
- Expanded support description: now also covers hotels, trains, attractions, itinerary planning, visa info, insurance, car rentals, all via Fliggy.
- Emphasized language matching (Chinese/English) and validation of output with booking links.
- Clarified when to activate versus defer to related skills (e.g., one-way handled by cheap-flights).
元数据
常见问题
Return Flights 是什么？
Search and compare round-trip flights with return date. Shows total cost for both legs, compares bundled vs separate booking to find the cheapest combination... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 77 次。
如何安装 Return Flights？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install return-flights」即可一键安装，无需额外配置。
Return Flights 是免费的吗？
是的，Return Flights 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Return Flights 支持哪些平台？
Return Flights 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Return Flights？
由 xiejinsong（@xiejinsong）开发并维护，当前版本 v3.2.0。
推荐 Skills