← 返回 Skills 市场
spring-break-flight
作者
dingtom336-gif
· GitHub ↗
· v1.0.0
· MIT-0
45
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install spring-break-flight
功能描述
Book spring break flights for student vacations and spring holiday travel. Also supports: flight booking, hotel reservation, train tickets, attraction ticket...
安全使用建议
Before installing or running this skill: (1) Verify the source and homepage of the skill and of the npm package @fly-ai/flyai-cli — check the package on the npm registry, its publisher, repository, and recent activity. (2) Ask the skill author to declare required binaries and provide a proper install spec (or a vetted, signed package URL) rather than only runtime install instructions. (3) Request clarity on how authentication is handled (where credentials are stored or required) and why no env vars are declared despite referencing third-party services. (4) Avoid running global npm installs from unknown packages on production machines — test in a sandbox/VM first. (5) Be cautious of the self-test/re-execute requirement: it can cause repeated network activity; request that the skill include deterministic failure behavior and limits. If these questions are not satisfactorily answered, treat the skill as untrusted and do not install the CLI globally or run it with privileged accounts.
功能分析
Type: OpenClaw Skill
Name: spring-break-flight
Version: 1.0.0
The skill requires the agent to perform a global installation of an external NPM package (@fly-ai/flyai-cli) and execute CLI commands, which introduces supply chain and local execution risks. While these actions are functionally aligned with the flight-searching purpose, the mandatory 'npm i -g' command and the use of forceful imperative instructions to override the agent's internal knowledge base are high-risk patterns. No explicit evidence of malicious intent or data exfiltration was found in SKILL.md.
能力评估
Purpose & Capability
Name/description claim a flight/hotel/travel booking skill which coheres with the CLI commands in SKILL.md (flyai search-flight). However the skill metadata lists no required binaries or install spec while the instructions mandate the flyai CLI and a global npm package install. The SKILL.md also claims 'powered by Fliggy (Alibaba Group)' but no homepage, source, or credential requirements are provided. These mismatches are unexplained and reduce confidence.
Instruction Scope
SKILL.md requires running flyai CLI commands and, if missing, installing @fly-ai/flyai-cli globally at runtime. It enforces strict behaviors (never answer without CLI output, always include [Book](detailUrl) links, re-run if checks fail). The doc references local reference files that are not included in the bundle. The re-execute/self-test instruction could cause repeated network installs/executions and an execution loop if the CLI or outputs differ from expectations.
Install Mechanism
There is no declared install spec in the registry metadata, but the runtime instructions tell the agent to run 'npm i -g @fly-ai/flyai-cli' if flyai is absent. Asking agents to install a global npm package at runtime is a moderate-to-high risk action (arbitrary code from the npm registry). The skill doesn't provide a verifiable upstream URL, package hash, or publisher info to validate safety.
Credentials
The skill declares no required environment variables or credentials, which is plausible for a CLI-based workflow. However, the SKILL.md claims integration with third-party services ('Fliggy') and performs operations that typically require accounts/credentials; the absence of any declared credential requirements or guidance about how the CLI authenticates is a gap that should be explained before use.
Persistence & Privilege
The skill does not request 'always: true', does not declare modifications to other skills or system-wide settings, and has no install-time files in the bundle. It does instruct installing a global npm package at runtime, which affects the system but is a normal CLI dependency rather than hidden persistent privileges.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install spring-break-flight - 安装完成后，直接呼叫该 Skill 的名称或使用
/spring-break-flight触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
- Removed internal reference files: fallbacks.md, playbooks.md, runbook.md, templates.md.
- All reference links in documentation retained, but underlying files are no longer present in the skill package.
- No changes to functionality, CLI, parameters, or output rules.
- The skill continues to guide usage, but reference materials for scenarios, templates, and failure recovery have been removed.
v3.2.0
Spring-break-flight v3.2.0 changelog:
- Expanded supported travel services: hotel reservation, train tickets, attraction tickets, itinerary planning, visa info, travel insurance, and car rental now included.
- Updated critical execution rules to strictly require CLI-based results; non-CLI/training data answers are explicitly forbidden.
- Added comprehensive parameter mapping and clear playbooks for finding recommended, cheapest, fastest, and direct spring break flights.
- Clarified step-by-step workflow: strict environment check, user parameter collection, CLI execution, and output validation.
- Enhanced output instructions: booking links are mandatory for each result, and detailed formatting and brand requirements are specified.
- Broadened compatibility: now supports Claude Code, OpenClaw, Codex, QClaw, ArkClaw, and all SKILL.md-compatible agents.
元数据
常见问题
spring-break-flight 是什么？
Book spring break flights for student vacations and spring holiday travel. Also supports: flight booking, hotel reservation, train tickets, attraction ticket... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 45 次。
如何安装 spring-break-flight？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install spring-break-flight」即可一键安装，无需额外配置。
spring-break-flight 是免费的吗？
是的，spring-break-flight 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
spring-break-flight 支持哪些平台？
spring-break-flight 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 spring-break-flight？
由 dingtom336-gif（@dingtom336-gif）开发并维护，当前版本 v1.0.0。
推荐 Skills