senior-flights

Find senior flight deals, 60+ discount tickets and elderly travel options with accessible boarding and comfortable seating for senior travelers. Also support...

Key things to consider before installing or enabling this skill: - The skill forces use of an external CLI (npm package @fly-ai/flyai-cli) and instructs installing it globally. Verify the package on the npm registry (owner, downloads, source repo, and trustworthiness) before allowing any automated install — global npm installs can modify your system and, if malicious, are high-impact. - The manifest does not declare any API keys or environment variables, but the CLI may require credentials; ask the publisher how the CLI authenticates and where secrets are stored. Do not hand over cloud/API credentials unless you understand why they are needed. - The runbook tells the agent to log requests (including user queries and CLI commands) to .flyai-execution-log.json. That file may contain personal data or search terms — ensure you’re comfortable with local persistence and review/rotate/delete logs regularly. - The description references Fliggy (Alibaba Group) but runtime commands use flyai — confirm provenance. If the skill's data source is a paid/third-party service, get explicit documentation and privacy/terms links. - Safer alternatives: ask the skill owner for a vetted install instruction (signed release URL, checksums, or a well-known package repo link), or run the CLI install manually yourself in a sandbox/container and inspect network activity and storage before enabling autonomous use. If you proceed: prefer installing the CLI yourself (not via an agent), review the package code or repository, and verify what credentials the CLI needs and where it stores logs.

Type: OpenClaw Skill Name: senior-flights Version: 3.2.0 The skill mandates the global installation of an external NPM package (@fly-ai/flyai-cli) and explicitly instructs the agent to use 'sudo' if the installation fails (references/fallbacks.md). It also requires filesystem write access to maintain an execution log (references/runbook.md). While these actions are plausibly intended to support the CLI-driven flight search functionality, the use of high-privilege installation commands and persistent local file modification represents a significant security risk without further verification of the external package.