Team Outing Planner

帮助公司团队规划团建活动目的地。收集团队成员的偏好（活动类型、预算、时间等），综合分析推荐最佳目的地，并通过flyai查询详细信息。适用于团建规划、集体出游、公司活动等场景。

What to consider before installing: - Source: the skill's source/homepage is unknown; prefer skills from known authors or a repo you can inspect. - fly.ai dependency: the instructions call flyai CLI commands and the README suggests npm installing @fly-ai/flyai-cli, but the skill metadata does not declare that binary or any credentials. Confirm whether you need to install flyai-cli and what credentials (API key/token) it needs before running anything. - Credentials: do not provide API keys or tokens until you verify the fly.ai service requirements and trust the skill's author. The skill does not declare any env vars for credentials — this is a mismatch. - File writes & network: the skill will write ~/team-outing-recommendation.html and open it. That file may load external images and booking links when opened, causing your browser to make network requests to third-party hosts (revealing your IP and that you opened the report). Inspect the generated HTML template (included) — it contains no embedded JS, but images/links are external placeholders. - Prompt-injection flag: the SKILL.md contained unicode control characters; open the files in a text editor and search for invisible characters (zero-width spaces, directional controls) before executing or publishing the skill. - Testing advice: run this skill in a sandboxed environment (or an account with limited privileges) first. Manually install and run flyai-cli and test the search commands you intend to use. If you plan to supply credentials, create a scoped/test key if the service supports it. - If you control the skill: update metadata to declare required binaries (flyai-cli) and any expected env vars, and remove/justify any unusual unicode characters so reviewers can verify intent. Given the inconsistencies (undeclared CLI dependency/credentials and the unicode-control-chars finding), proceed cautiously — the behavior looks like what it claims to do, but the metadata omissions and obfuscated characters are reasons to verify before trusting or supplying secrets.

Type: OpenClaw Skill Name: team-outing-planner Version: 1.0.1 The skill provides legitimate team outing planning functionality but exhibits risky behaviors by instructing the AI agent to execute shell commands (`flyai-cli` and `open`) and perform file system operations in the user's home directory (`~/team-outing-recommendation.html`). Specifically, the instructions in `SKILL.md` direct the agent to construct shell commands using potentially unsanitized user input (e.g., city names or destination keywords), which presents a shell injection vulnerability. While the intent appears benign and aligned with the stated purpose, the lack of input validation and the use of broad shell execution capabilities meet the criteria for a suspicious classification.