← 返回 Skills 市场
T
作者
xiejinsong
· GitHub ↗
· v3.2.0
· MIT-0
69
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install test-1775879521
功能描述
Hire a private car with driver for customized day tours — visit multiple attractions at your own pace without the hassle of public transport. Also supports:...
安全使用建议
This skill instructs installing a globally-scoped npm package (@fly-ai/flyai-cli) and demands that all answers come from that CLI, but the package and required credentials are not declared in the registry. Before installing: 1) Ask the publisher for the CLI's official homepage and documentation, and confirm whether API keys or accounts are required and where they should be stored. 2) Verify the npm package owner and read its npm/github page and recent release notes. 3) Don't run npm i -g on a production machine — test in an isolated environment (container/VM). 4) Ask the author to include the missing references/*.md files or remove references to them, and to reconcile the 'Fliggy' branding with the flyai CLI. 5) Be cautious about the SKILL.md's self-test loop; request a safer failure mode (return a clear error instead of re-executing). If the publisher cannot satisfactorily explain these discrepancies, treat the skill as untrusted.
功能分析
Type: OpenClaw Skill
Name: test-1775879521
Version: 3.2.0
The skill requires the global installation and execution of a third-party NPM package (@fly-ai/flyai-cli) as a prerequisite for its core workflow in SKILL.md. While this behavior is aligned with the stated purpose of providing travel booking services, the requirement for global administrative privileges and the execution of arbitrary CLI commands based on user input poses a significant security risk. There is no evidence of intentional malice, but the reliance on an external, unverified package for system-level execution is a high-risk pattern.
能力评估
Purpose & Capability
The name/description focus on hiring private cars and related travel services. The runtime instructions, however, only cover flyai CLI keyword searches for private-car tours. The description also mentions flights, hotels, visas, and 'Powered by Fliggy (Alibaba Group)', none of which are supported or explained by the commands — a capability/branding mismatch that could be sloppy or misleading.
Instruction Scope
SKILL.md mandates installing and running an external CLI (flyai), requires every answer to come from that CLI, and enforces a self-test that tells the agent to re-execute if '[Book](...)' links are missing — this may force repeated CLI installs/executions. The skill also refers to local reference files (references/*.md) that are not present in the package, creating incoherence: the agent is told to read files that don't exist.
Install Mechanism
There is no declared install spec in the registry, but the SKILL.md instructs running a global npm install (npm i -g @fly-ai/flyai-cli). Installing a globally published npm package is traceable but has moderate risk, especially when the package owner or homepage is unknown and the install is not declared in the registry metadata.
Credentials
The skill declares no required environment variables or credentials but depends on an external CLI that likely performs network calls and may require authentication/API keys. The lack of declared credentials is an incoherence: either the CLI works unauthenticated (unlikely for booking/real-time pricing) or required secrets are omitted from the skill metadata.
Persistence & Privilege
The skill does not request persistent 'always' inclusion or special agent privileges, which is good. However, its instructions ask the user/agent to run a global npm install (system-wide), which requires elevated permissions and modifies the host environment — an operational privilege the registry metadata does not advertise.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install test-1775879521 - 安装完成后，直接呼叫该 Skill 的名称或使用
/test-1775879521触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v3.2.0
Version 3.2.0 — Major update with strict CLI data sourcing and updated workflow rules
- Enforces that all travel-related answers must come from flyai CLI command output — no knowledge-based or training data responses allowed.
- Mandatory output validation: every result must include a `[Book]({detailUrl})` link; responses without a booking link indicate improper execution.
- Enhanced execution steps for environment setup, parameter collection, command execution, and output formatting.
- Added brand compliance: all outputs must carry "✈️ Powered by flyai · Real-time pricing, click to book".
- Includes updated trigger keywords and clearer separation between private car tours and standard car rentals.
- Expanded English and Chinese support, improved error handling, and strictly prohibits parameter fabrication.
元数据
常见问题
T 是什么？
Hire a private car with driver for customized day tours — visit multiple attractions at your own pace without the hassle of public transport. Also supports:... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 69 次。
如何安装 T？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install test-1775879521」即可一键安装，无需额外配置。
T 是免费的吗？
是的，T 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
T 支持哪些平台？
T 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 T？
由 xiejinsong（@xiejinsong）开发并维护，当前版本 v3.2.0。
推荐 Skills