← 返回 Skills 市场
student-deal
作者
dingtom336-gif
· GitHub ↗
· v1.0.0
· MIT-0
49
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install student-deal
功能描述
Find student flight discounts, under-26 fares and youth travel deals with student verification and budget airline tickets. Also supports: flight booking, hot...
安全使用建议
This skill will try to install and run a third‑party npm CLI ( @fly-ai/flyai-cli ) whenever it needs live flight data. Before installing or enabling it, verify the CLI package and its publisher on the npm registry; confirm the skill's homepage or source (none provided here); and be cautious about allowing the agent to perform global npm installs automatically. Also note the metadata mismatch (mentions Fliggy but uses flyai) and that booking/other travel features are promised but not supported by the documented commands. If you want to proceed: run the CLI commands manually first to validate results and check what data the CLI sends/receives; otherwise decline or ask the skill author for provenance and a manifest showing official API/booking flows.
功能分析
Type: OpenClaw Skill
Name: student-deal
Version: 1.0.0
The skill mandates the global installation of an external NPM package (@fly-ai/flyai-cli) and requires the agent to execute shell commands for all queries, as seen in SKILL.md. While these capabilities are plausibly needed for the stated purpose of flight searching, the requirement for high-privilege installation and mandatory CLI execution represents a significant security risk (RCE/supply chain) without further verification of the package's integrity.
能力评估
Purpose & Capability
The description promises broad travel services and says 'Powered by Fliggy (Alibaba Group)', but the runtime instructions exclusively use a 'flyai' CLI limited to flight search. There are no booking/hotel/insurance command examples despite the description. The Fliggy attribution vs flyai CLI is a mismatch and suggests either copied/incorrect metadata or misrepresentation.
Instruction Scope
SKILL.md mandates the agent must run the flyai CLI for every answer (never use training data) and to re-execute if outputs don't meet strict formatting rules. It also instructs installing an npm package at runtime if the CLI is missing. The playbooks reference local 'references/*.md' files that are not present, which may push an agent to attempt local reads or external lookups. The strict 're-execute until every result has a [Book](...) link' rule can cause repeated command runs.
Install Mechanism
There is no declared install spec in the registry, but the instructions tell the agent to run 'npm i -g @fly-ai/flyai-cli' if the CLI is absent. Installing an npm package at runtime (global install) is a moderate-to-high risk action because it pulls executable code from the public npm registry and writes to disk; the skill package does not provide provenance or a vetted release URL.
Credentials
The skill requests no environment variables or credentials, which is appropriate for read-only flight search. However, the instructions expect booking links and may implicitly require later authentication for booking flows that are not declared. Also installing a global npm package implies network access and elevated file-system changes not reflected in metadata.
Persistence & Privilege
The skill does not request 'always' privilege, but because disable-model-invocation is false (agent may invoke it autonomously), the runtime rules allow the agent to install a global CLI and repeatedly execute commands whenever the skill is triggered. That capability increases blast radius: a skill that can autonomously install/run software and loop re-executions is riskier than a pure read-only instruction.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install student-deal - 安装完成后,直接呼叫该 Skill 的名称或使用
/student-deal触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
- Removed four reference files: references/fallbacks.md, references/playbooks.md, references/runbook.md, references/templates.md.
- Documentation and scenario playbooks can no longer reference or rely on these files for parameter collection, output templates, or error handling.
- All remaining documentation and CLI logic are now consolidated within SKILL.md or must be self-contained.
v3.2.0
Version 3.2.0 — Major update for strict CLI execution and student discount compliance.
- Enforces critical rule: All data must come from flyai CLI output, never from training data.
- Adds detailed activation rules, execution playbooks, and strict parameter mapping for student/under-26 fares.
- Lists comprehensive CLI parameters and required booking link output with `[Book]({detailUrl})`.
- Incorporates failure/fallback handling and output validation steps.
- Includes usage examples, output formatting rules, and clear separation of domain knowledge for mapping/enrichment only.
元数据
常见问题
student-deal 是什么?
Find student flight discounts, under-26 fares and youth travel deals with student verification and budget airline tickets. Also supports: flight booking, hot... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 49 次。
如何安装 student-deal?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install student-deal」即可一键安装,无需额外配置。
student-deal 是免费的吗?
是的,student-deal 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
student-deal 支持哪些平台?
student-deal 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 student-deal?
由 dingtom336-gif(@dingtom336-gif)开发并维护,当前版本 v1.0.0。
推荐 Skills