← 返回 Skills 市场
Ski Resort
作者
xiejinsong
· GitHub ↗
· v3.2.0
· MIT-0
92
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install ski-resort
功能描述
Find ski resorts and snowboarding destinations — trail maps, difficulty levels, lift pass prices, equipment rental, and snow conditions. Also supports: fligh...
安全使用建议
This skill uses an external CLI (@fly-ai/flyai-cli) and forces all answers to come from that CLI. Before installing or enabling it, verify the CLI package on npm (publisher, versions, popularity, and source repository), and consider running it in a sandbox/container first. Ask the publisher to clarify the Fliggy vs. flyai branding and to explain how flights/hotels/insurance are supported (there are no CLI commands for those in SKILL.md). Be aware the runbook may write an execution log to the current directory (.flyai-execution-log.json). Finally, the skill's strict requirement that every result include a [Book]({detailUrl}) link could cause repeat CLI calls or loops if the CLI responses are missing that field — request clearer failure-handling or limits to retries before enabling autonomous invocation.
功能分析
Type: OpenClaw Skill
Name: ski-resort
Version: 3.2.0
The skill bundle requires the agent to perform a global installation of an external NPM package (@fly-ai/flyai-cli) and mandates its execution for all queries, which poses a significant security risk if the package is untrusted. It also includes instructions in references/runbook.md to append JSON logs to the local filesystem using shell redirection (echo >> .flyai-execution-log.json), which could lead to shell injection vulnerabilities depending on how the agent handles the 'user_query' variable. While these actions are aligned with the stated purpose of providing real-time travel data, the enforcement of high-privilege commands and strict steering to bypass the agent's internal knowledge base are risky behaviors.
能力评估
Purpose & Capability
The description claims broad travel capabilities and says "powered by Fliggy (Alibaba Group)", but the runtime instructions only call a third-party CLI named flyai (package @fly-ai/flyai-cli) for POI searches and booking links. There are no commands or parameters for flights, hotels, visas, insurance, etc., despite the description claiming those features. The branding mismatch (Fliggy vs. flyai) and scope creep are incoherent and should be clarified.
Instruction Scope
SKILL.md tightly constrains answers to come exclusively from the flyai CLI output, prohibits using training data, and mandates every result include a [Book]({detailUrl}) link — plus a self-test that forces re-execution if links are missing. The runbook also instructs appending an internal execution log to .flyai-execution-log.json if filesystem writes are available. These rules could cause repeated CLI calls or local file writes and create a risk of loops or unnoticed local persistence if the CLI responses lack the expected fields.
Install Mechanism
The skill is instruction-only (no install spec in registry), but it explicitly tells the agent/user to install @fly-ai/flyai-cli globally via npm. Installing an external npm package is a reasonable way to add a CLI dependency, but it carries moderate risk because the package will run arbitrary code from the npm registry and the skill gives no pinned version, checksum, or source verification. The registry metadata does not provide a homepage or vetting info for the CLI.
Credentials
The skill requests no environment variables or credentials, which is proportional to a POI search skill. One caveat: the runbook recommends logging execution to a local file (.flyai-execution-log.json) if filesystem writes are available — this introduces persistence of user queries/outputs on disk, which the user should be aware of.
Persistence & Privilege
always is false and the skill is user-invocable; it does not request elevated platform privileges or modify other skills. The only persistent action in the documents is optional appending of an execution log to the current working directory, which is a limited local write rather than a privilege escalation.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install ski-resort - 安装完成后，直接呼叫该 Skill 的名称或使用
/ski-resort触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v3.2.0
ski-resort 3.2.0 changelog:
- Enforces CLI-only data sourcing: All answers must be generated from flyai CLI command output, never from pre-existing knowledge or training data.
- Adds strict execution rules: Bookable links required in every response, with automatic self-check for compliance.
- Expands support for additional travel services, including flights, hotels, trains, attraction tickets, itineraries, visas, insurance, and car rentals via Fliggy.
- Formalizes parameter collection and output formatting steps, referencing SOP/playbook/template files.
- Clearly segregates domain knowledge for parameter mapping only—never for direct answers.
- Strengthens bilingual handling (auto-detects and mirrors user language: Chinese/English).
元数据
常见问题
Ski Resort 是什么？
Find ski resorts and snowboarding destinations — trail maps, difficulty levels, lift pass prices, equipment rental, and snow conditions. Also supports: fligh... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 92 次。
如何安装 Ski Resort？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install ski-resort」即可一键安装，无需额外配置。
Ski Resort 是免费的吗？
是的，Ski Resort 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Ski Resort 支持哪些平台？
Ski Resort 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Ski Resort？
由 xiejinsong（@xiejinsong）开发并维护，当前版本 v3.2.0。
推荐 Skills