← 返回 Skills 市场
summer-vacation-flight
作者
liquanyu123
· GitHub ↗
· v3.2.0
· MIT-0
71
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install summer-vacation-flight
功能描述
Book summer vacation flights for July and August holiday travel. Also supports: flight booking, hotel reservation, train tickets, attraction tickets, itinera...
安全使用建议
What to consider before installing/using this skill:
- Confirm the provider and package: the skill claims "Powered by Fliggy (Alibaba Group)" but instructs use of an npm package named @fly-ai/flyai-cli. Ask the author which service actually provides the data and verify the official CLI/package source.
- Verify the npm package and publisher on the npm registry before allowing a global install. Global `npm i -g` runs code on your system (including possible postinstall scripts); only install packages from trusted maintainers.
- Check that the flyai CLI actually supports the flags the skill expects (--origin, --destination, --dep-date, --sort-type, --journey-type, --max-price, etc.). The SKILL.md contains mismatched parameter lists and mappings — confirm the real CLI parameter names to avoid repeated failed executions or malformed commands.
- Be aware the skill enforces strict output rules (every result must include [Book]({detailUrl}), never use jumpUrl, never answer from training data). If the CLI returns link fields with different names you may get repeated retries or missing results; ask the author how to handle such cases.
- If you cannot verify the CLI/package or the provider, or you cannot allow a global npm install from that publisher, do not install. Request clarification or a signed/official source URL and a list of exact CLI flags and sample outputs that the skill expects.
If you want, I can draft questions to send to the skill author to resolve the branding/flag inconsistencies and to request the official npm package link and publisher info.
功能分析
Type: OpenClaw Skill
Name: summer-vacation-flight
Version: 3.2.0
The skill bundle requires the AI agent to globally install an external NPM package (@fly-ai/flyai-cli) via 'npm i -g' if it is missing, which constitutes a high-risk supply chain and remote code execution (RCE) risk. While these instructions in SKILL.md and references/fallbacks.md are aligned with the stated purpose of flight searching, the requirement for global installation and the strict directives to bypass internal knowledge in favor of external CLI execution are characteristic of potentially risky agent-based workflows.
能力评估
Purpose & Capability
The skill claims to book flights and related travel services and instructs the agent to use a CLI (flyai). That capability aligns with the stated purpose. However the SKILL.md also claims “Powered by Fliggy (Alibaba Group)” while all runtime instructions reference an npm package @fly-ai/flyai-cli — a branding/provider mismatch that should be clarified. The skill also advertises hotels, trains, attractions, etc., but the provided parameters and playbooks are focused almost exclusively on flight-search commands.
Instruction Scope
The runtime instructions force CLI-based operation (OK for an instruction-only CLI skill) and even mandate installing a global npm package if the CLI is missing. There are several internal inconsistencies in the instructions: the Parameters table does not list flags that are used elsewhere (e.g., --journey-type appears in playbooks but is missing from the main Parameters table; references/templates.md maps user phrases to flags like --max-price and --seat-class-name that are absent from the Parameters table). The SKILL.md also imposes strict output rules (every result must include [Book]({detailUrl}), must not use jumpUrl, never use training data) — these are operational requirements but could cause the agent to repeatedly attempt CLI calls or fail outright if the CLI's actual JSON fields differ. No instructions reference reading files or secrets outside the CLI usage, which is good.
Install Mechanism
There is no formal install spec in the registry, but the instructions tell the agent to run `npm i -g @fly-ai/flyai-cli` if the CLI is missing. Global npm installation from the public registry is a common pattern but carries moderate risk: it downloads and executes package code with potentially postinstall scripts. Because the skill does not provide a verified source URL or checksum, you should verify the npm package identity and publisher before allowing global install.
Credentials
The skill does not request environment variables, secrets, or config paths. All required inputs are query parameters mapped to CLI flags. There is no evidence the skill is requesting unrelated credentials or system secrets.
Persistence & Privilege
The skill does not request 'always: true' or other elevated platform privileges. It does require network access to install the CLI if missing, but it does not request persistent modifications to other skills or global agent settings in its files.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install summer-vacation-flight - 安装完成后，直接呼叫该 Skill 的名称或使用
/summer-vacation-flight触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v3.2.0
- Enforced strict CLI-only answers: all results must be sourced directly from flyai CLI, never from training data.
- Mandated environment check for flyai CLI before any execution; automatic install attempt if missing.
- Updated output rules: every flight result must include a booking link (`[Book]({detailUrl})`), results without links are omitted.
- Expanded support for related vacation travel services: hotels, trains, attraction tickets, itinerary, visas, car rental, insurance.
- Added activation and exclusion triggers for more precise skill invocation.
- Refined playbooks for recommended, cheapest, fastest, and direct summer flights.
元数据
常见问题
summer-vacation-flight 是什么？
Book summer vacation flights for July and August holiday travel. Also supports: flight booking, hotel reservation, train tickets, attraction tickets, itinera... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 71 次。
如何安装 summer-vacation-flight？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install summer-vacation-flight」即可一键安装，无需额外配置。
summer-vacation-flight 是免费的吗？
是的，summer-vacation-flight 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
summer-vacation-flight 支持哪些平台？
summer-vacation-flight 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 summer-vacation-flight？
由 liquanyu123（@liquanyu123）开发并维护，当前版本 v3.2.0。
推荐 Skills