← 返回 Skills 市场
amurtiger01

Ticket Price Compare

作者 Amurtiger · GitHub ↗ · v1.2.6 · MIT-0
cross-platform ✓ 安全检测通过
221
总下载
0
收藏
0
当前安装
9
版本数
在 OpenClaw 中安装
/install ticket-price-compare
功能描述
Compare real-time flight and train ticket prices across major platforms with direct booking links, real-time train availability, and discount condition details.
安全使用建议
This skill appears to do what it says: run the provided Python script which scrapes booking sites and queries 12306, optionally using Firecrawl/Tequila/Amadeus keys if you provide them. Before using: (1) review scripts/ticket_search.py yourself (it will execute on your machine and perform network requests), (2) don't set any environment variable you don't trust—especially avoid enabling any SSL-unverified fallback flag unless you understand the network risks, (3) be aware that providing a FIRECRAWL_API_KEY or other API keys means the script will send requests to those third-party APIs (and rendered page HTML may pass through them), and (4) if running in a sensitive environment (contains other secrets or internal network access), run the script in an isolated environment/container or inspect the full code for data-leakage before running.
功能分析
Type: OpenClaw Skill Name: ticket-price-compare Version: 1.2.6 The ticket-price-compare skill is a legitimate tool for searching and comparing flight and train prices across multiple platforms. The core logic in `scripts/ticket_search.py` uses standard Python libraries to query public APIs (12306) and perform web scraping on travel sites (Ctrip, Qunar), with optional support for Firecrawl and Amadeus APIs. The script demonstrates security awareness by enforcing full TLS verification for network connections and providing clear documentation on API key management. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found.
能力标签
cryptocan-make-purchasesrequires-oauth-tokenrequires-sensitive-credentials
能力评估
Purpose & Capability
Name/description (compare flight/train prices, provide booking links) aligns with the included script and declared network targets (12306, Ctrip, Qunar, Firecrawl, Tequila, Amadeus). Optional env vars (FIRECRAWL_API_KEY, TEQUILA_API_KEY, AMADEUS_*) are relevant to enhanced data sources. Minor inconsistency: release notes mention an opt-in TICKET_ALLOW_UNVERIFIED_SSL flag and the manifest claims it is declared, but the SKILL.md frontmatter shown earlier does not list it — this is a documentation/manifest mismatch rather than evidence of malicious behavior.
Instruction Scope
SKILL.md tells the agent to run the packaged Python script and documents which domains will be queried. Runtime instructions only access network endpoints and optional environment variables relevant to fetching ticket data; they do not instruct reading unrelated local files or harvesting other secrets.
Install Mechanism
No install specification is provided (instruction-only plus bundled script). The script uses Python stdlib (urllib, ssl) and optionally attempts to import the Amadeus SDK. README notes an optional pip install for Amadeus SDK — reasonable and optional. No downloads from untrusted URLs or extract/install steps are present.
Credentials
Declared environment variables are optional and appropriate for the described fallbacks/enhancements (Firecrawl for JS rendering; Tequila/Amadeus for additional flight data). There are no unexpected SECRET/TOKEN env vars unrelated to travel data. One caution: release notes refer to a TICKET_ALLOW_UNVERIFIED_SSL opt-in toggle (re-enables unverified SSL previously used); enabling such a flag would reduce security and should only be done knowingly on trusted networks.
Persistence & Privilege
The skill is not forced-always, does not request persistent system-level privileges, and does not modify other skills or global agent config. Autonomous invocation remains enabled by default (platform normal) but does not by itself increase the skill's scope beyond network requests and local script execution.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install ticket-price-compare
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /ticket-price-compare 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.2.6
Remove SSL bypass entirely: no CERT_NONE in codebase, full TLS verification for all connections
v1.2.5
Security: SSL fallback opt-in, declare env vars and network access in manifest
v1.2.4
Security: SSL verify-first fallback for 12306 (reduces MITM exposure), unify train output format
v1.2.3
Fix train ticket output: unify price+seats into one table, prevent AI from ignoring train prices
v1.2.2
Add detailed API key setup guide with step-by-step instructions for Firecrawl, Tequila, and Amadeus
v1.2.1
Update README/SKILL.md with Firecrawl documentation, enhanced data source details
v1.2.0
Version 1.2.0 - Updated platform and UI references from Chinese-only names to international equivalents (e.g., “Я��” to “Ctrip”). - Clarified supported data sources and output sections for better user guidance. - Improved and standardized terminology in documentation (platform list, seat/coach types, field labels). - Enhanced clarity on workflow and fallback data sources. - Updated discount conditions instructions to reference the latest platforms_guide.md. - General documentation and formatting improvements across README.md and SKILL.md.
v1.1.0
v1.1.0: Removed PerimeterX bypass code, fixed SSL verification (scoped to 12306 only), removed proxy credential hints. Addresses ClawHub security review findings.
v1.0.0
Initial release: 12306 real-time train tickets, Ctrip flight scraping, multi-platform links, optional Skyscanner/Tequila/Amadeus APIs
元数据
Slug ticket-price-compare
版本 1.2.6
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 9
常见问题

Ticket Price Compare 是什么?

Compare real-time flight and train ticket prices across major platforms with direct booking links, real-time train availability, and discount condition details. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 221 次。

如何安装 Ticket Price Compare?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install ticket-price-compare」即可一键安装,无需额外配置。

Ticket Price Compare 是免费的吗?

是的,Ticket Price Compare 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Ticket Price Compare 支持哪些平台?

Ticket Price Compare 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Ticket Price Compare?

由 Amurtiger(@amurtiger01)开发并维护,当前版本 v1.2.6。

💬 留言讨论