← 返回 Skills 市场
reunion-trip
作者
Yangki Zhang
· GitHub ↗
· v3.2.0
· MIT-0
49
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install reunion-trip
功能描述
Book flights for family and class reunion trips. Also supports: flight booking, hotel reservation, train tickets, attraction tickets, itinerary planning, vis...
安全使用建议
This skill is instruction-only but asks agents to install and use a third-party CLI (@fly-ai/flyai-cli) at runtime and claims to be 'powered by Fliggy' — a clear mismatch. Before installing or using this skill: 1) Verify the flyai CLI package on the npm registry (publisher, popularity, repository, README) and inspect its code; 2) Confirm whether the skill actually integrates with Fliggy or flyai and ask the author for a homepage/source; 3) Be cautious about allowing automated global npm installs (they can run arbitrary code); prefer to install such CLIs manually in a sandbox or container first; 4) Ask how authentication works (where API keys or accounts are stored) and avoid providing secrets until you know the CLI's behavior; 5) If unsure, treat the skill as untrusted and do not run its automatic npm install on a production machine.
功能分析
Type: OpenClaw Skill
Name: reunion-trip
Version: 3.2.0
The skill is a flight search and booking tool that interfaces with the `flyai` CLI. It includes standard procedures for environment verification and dependency installation (`npm i -g @fly-ai/flyai-cli`) in `SKILL.md` and `references/fallbacks.md`. The instructions are strictly focused on ensuring the agent uses real-time data from the CLI rather than its internal training data, and there is no evidence of data exfiltration, malicious command execution, or harmful prompt injection.
能力评估
Purpose & Capability
The description claims the skill is 'powered by Fliggy (Alibaba Group)', but every runtime instruction, templates, and required commands reference a 'flyai' CLI and brand ('Powered by flyai'). There is no mention of Fliggy APIs, credentials, or any Fliggy-specific tooling. This mismatch suggests either copy-paste error or deliberate mislabeling; the requested tooling (flyai CLI) does not align with the stated provider.
Instruction Scope
The SKILL.md is prescriptive and stays within a tight scope: always run the flyai CLI for live data and never use training data. It does not instruct reading arbitrary local files or exfiltrating environment variables. However, it mandates installing a global npm package if the CLI is missing and insists on strict behavior (always include [Book] links, never fabricate results), which gives the skill strong control over agent output. The instructions forbid fabricating results but do not document how credentials are supplied to the CLI if needed.
Install Mechanism
There is no formal install spec in the registry, but the runtime instructions instruct agents to run `npm i -g @fly-ai/flyai-cli` if the CLI is missing. Installing a global npm package at runtime can execute arbitrary install scripts and write to the host system; the npm package's provenance is unknown (no homepage or registry metadata provided). While installing a CLI for a booking integration is plausible, doing so at runtime without vetting the package is a moderate-to-high risk.
Credentials
The skill declares no required environment variables or credentials, which is reasonable for an instruction-only skill. However, a flight/hotel booking CLI commonly requires API keys or an authenticated account; SKILL.md does not explain how the CLI authenticates or whether it will prompt for credentials or read local config. The absence of any guidance about credentials is notable and leaves ambiguity about where secrets would be supplied or stored.
Persistence & Privilege
The skill does not request persistent installation via the platform (always: false) and does not modify other skills' configs. The only persistence risk stems from the runtime instruction to globally install an npm package, which would create system presence outside the skill sandbox; this is not controlled via the registry install spec.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install reunion-trip - 安装完成后,直接呼叫该 Skill 的名称或使用
/reunion-trip触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v3.2.0
reunion-trip 3.2.0
- Expanded description to clarify support for hotel reservations, train tickets, attractions, itinerary planning, visa info, travel insurance, and car rental in addition to flights.
- Added detailed execution and output validation rules, including booking link and brand tag requirements.
- Updated parameter mapping, playbooks, and step-by-step workflow for query handling and CLI execution.
- Clarified prerequisites and command usage for the flyai CLI.
- Improved compatibility information and documentation for parameter collection, error handling, and supported agents.
元数据
常见问题
reunion-trip 是什么?
Book flights for family and class reunion trips. Also supports: flight booking, hotel reservation, train tickets, attraction tickets, itinerary planning, vis... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 49 次。
如何安装 reunion-trip?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install reunion-trip」即可一键安装,无需额外配置。
reunion-trip 是免费的吗?
是的,reunion-trip 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
reunion-trip 支持哪些平台?
reunion-trip 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 reunion-trip?
由 Yangki Zhang(@ivan97)开发并维护,当前版本 v3.2.0。
推荐 Skills