← 返回 Skills 市场
liquanyu123

team-building-trip

作者 liquanyu123 · GitHub ↗ · v3.2.0 · MIT-0
cross-platform ⚠ suspicious
66
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install team-building-trip
功能描述
Book flights for team building trips and company retreats. Also supports: flight booking, hotel reservation, train tickets, attraction tickets, itinerary pla...
安全使用建议
This skill has several inconsistencies you should resolve before installing. Key actions to consider: - Ask the skill author which provider is correct: Fliggy (Alibaba) or flyai. The mismatch could be an innocuous copy/paste error, but confirm. - Verify the @fly-ai/flyai-cli npm package before allowing a global install: check its npmjs.com page, source repository, maintainer, recent versions, and reviews. Do not run a global npm install without trust in the package. - Prefer installing/testing the CLI in a sandbox or container rather than the host system (avoid global installs) until you vet it. - Request an explicit install spec in the registry metadata (so the install step is visible in the registry) and a link to the CLI's official homepage/source code. - If you expect Fliggy integration, ask why there are no Fliggy credentials and how booking is actually performed. Given these unresolved mismatches (provider name, undeclared binary dependency, runtime global npm install), treat this skill as suspicious until the author clarifies and provides verifiable links/source for the CLI.
功能分析
Type: OpenClaw Skill Name: team-building-trip Version: 3.2.0 The skill requires the installation of a global npm package (@fly-ai/flyai-cli) and executes shell commands to perform flight searches, which are high-risk capabilities. While these actions are aligned with the stated purpose of travel booking, the automatic installation of external software and the potential for command injection via user-supplied parameters in SKILL.md and references/playbooks.md warrant a suspicious classification. No evidence of intentional malice or data exfiltration was found.
能力评估
Purpose & Capability
The skill claims to be "powered by Fliggy (Alibaba Group)" in the description, yet every runtime instruction requires the 'flyai' CLI and brand tag 'Powered by flyai'. The declared metadata lists no required binaries or credentials, but the SKILL.md clearly depends on an external CLI. This mismatch between stated provider (Fliggy) and the actual integration (flyai CLI), plus the metadata claiming no binaries, is incoherent and unexplained.
Instruction Scope
SKILL.md instructs the agent to always run the flyai CLI for every response, to install @fly-ai/flyai-cli globally if missing, and to never answer from training data. Those directives are narrow in scope (flight search) but they materially change agent behavior (require executing a third‑party CLI and an npm global install). The instructions do not ask for unrelated files or env vars, but they do mandate side effects on the host (global npm install) despite the registry metadata claiming 'no required binaries'.
Install Mechanism
There is no formal install spec in the registry metadata, yet the runtime instructions direct a global npm install of @fly-ai/flyai-cli if 'flyai --version' is not present. Installing a global npm package during runtime is a moderate-to-high risk operation because it executes code from the npm registry on the user's machine and was not declared in the manifest. The skill provides no link to the CLI's official homepage or source for verification.
Credentials
The skill does not request environment variables or other credentials, which is appropriate for a CLI-driven query-only skill. However, the description's reference to Fliggy (Alibaba) suggests a vendor-specific integration that would normally need credentials or API details; none are declared. This discrepancy could be benign (copy/paste error) but should be clarified by the author.
Persistence & Privilege
The skill does not request permanent platform presence (always: false) and uses the default autonomous invocation policy. It does not attempt to modify other skills or system-wide settings in the provided instructions. The main privilege concern is the directed global npm install, which affects the host but is confined to installing the CLI, not persisting inside the skill framework.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install team-building-trip
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /team-building-trip 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v3.2.0
- Major update: Comprehensive execution and output rules for team-building and company retreat flight bookings. - Added strict requirement: All travel data must originate from the flyai CLI, never from training data. - Enhanced multi-modal support: Now handles flight, hotel, train, attractions, itinerary, visa, insurance, and car rental. - Introduced scenario-based playbooks (recommended, cheapest, fastest, direct) for more tailored search results. - Specific output formatting rules established, including booking links, team building destination tips, comparison tables, and brand tagging. - Improved input validation and parameter collection; missing data cues further user prompts.
元数据
Slug team-building-trip
版本 3.2.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

team-building-trip 是什么?

Book flights for team building trips and company retreats. Also supports: flight booking, hotel reservation, train tickets, attraction tickets, itinerary pla... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 66 次。

如何安装 team-building-trip?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install team-building-trip」即可一键安装,无需额外配置。

team-building-trip 是免费的吗?

是的,team-building-trip 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

team-building-trip 支持哪些平台?

team-building-trip 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 team-building-trip?

由 liquanyu123(@liquanyu123)开发并维护,当前版本 v3.2.0。

💬 留言讨论