← 返回 Skills 市场
3751
总下载
3
收藏
4
当前安装
14
版本数
在 OpenClaw 中安装
/install travel-agent
功能描述
Find, book, and change flights for your human via email. One message, and done. (by BonBook)
安全使用建议
This skill is instruction-only and appears to do exactly what it says: exchange plain-text emails with [email protected] to find/book/manage flights. Before installing, confirm you (or your human) actually want the agent to send/receive emails to that address and that the platform's email permissions are granted only when appropriate. Verify the publisher contact ([email protected]) and the bonbook.co website yourself (use the access/signup link in SKILL.md) before entering any PII or payment data — the skill says payment/PII entry happens on the website and requires explicit human action. Because the skill relies on your agent's email permissions, avoid granting the agent broad inbox access unless necessary, and be alert for any inbound messages that request full PII or card numbers (the skill claims BonBook will not send such sensitive data via email).
功能分析
Type: OpenClaw Skill
Name: travel-agent
Version: 2.4.1
The skill is classified as benign. Its instructions are transparent, clearly aligned with its stated purpose as a travel agent, and repeatedly emphasize explicit human approval for all sensitive actions, including account creation, PII entry, and payment processing. The `skill.md` explicitly states 'disable-model-invocation: true' and 'require-explicit: true', reinforcing human oversight. While the skill involves handling PII and potentially payment information, these are core functions of a travel agent, and the instructions consistently frame these actions within the context of human consent and delegated authority (e.g., 'obtain explicit human approval', 'prompt human to input payment data', 'unless human has given agent access'). There is no evidence of malicious intent, data exfiltration beyond the stated purpose, unauthorized execution, persistence mechanisms, or prompt injection designed to bypass security or hide actions.
能力评估
Purpose & Capability
Name/description (book and manage flights via email) match the runtime instructions: the skill requires the agent to send/receive emails to [email protected] and optionally perform web form/account setup with explicit human approval. No unrelated credentials, binaries, or install actions are requested.
Instruction Scope
SKILL.md confines actions to sending plain-text requests to [email protected], reading inbound confirmations, and optionally guiding the human through website form completion. It explicitly requires human consent for PII/payment entry and instructs agents to hand off when consent is unclear — no instructions to read unrelated files, env vars, or system state are present.
Install Mechanism
There is no install spec and no code files; the skill is instruction-only, so nothing will be written to disk or downloaded. This is the lowest-risk install profile and appropriate for an email-based integration.
Credentials
The skill declares no environment variables, credentials, or config paths. It relies on the agent's preexisting email send/receive permissions (declared as prerequisites in SKILL.md), which is proportional to the described purpose.
Persistence & Privilege
The skill sets disable-model-invocation: true and require-explicit: true, has no persistence, and does not request elevated privileges. This minimizes autonomous action risk and aligns with the skill's claims.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install travel-agent - 安装完成后，直接呼叫该 Skill 的名称或使用
/travel-agent触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v2.4.1
- Clarified language in the data handling section to specify that BonBook controls and limits inbound email content, ensuring no sensitive PII is included.
- Improved explanation of privacy boundaries and what information is transmitted via email versus web.
- No features, behavior, or interface changes to the skill.
- Version bump to 2.4.1.
v2.4.0
Version 2.4.0
- Added detailed publisher information, including company incorporation, contact details, domain verification status, and instructions for verifying publisher authenticity.
- Clarified data handling, explicitly describing what information is included in outbound and inbound email communications.
- Updated security and data storage sections to specify that only minimal booking data (first name, booking reference, flight details, receipts) is shared via email—never full PII or card data.
- Enhanced sections on backend data storage and PCI-DSS compliance, including encryption and legal/privacy contacts.
- Various documentation clarifications on agency prerequisites, consent requirements, and legal verification procedures.
v2.3.1
- Clarified data handling by separating email and website channels: emails contain only flight requests; PII and payment data are submitted only via encrypted web forms.
- Updated agent prerequisites to specify web browsing is only needed for one-time setup, and detailed form completion consent requirements.
- Improved credentials and persistence sections to clearly state that no PII, payment data, or credentials are transmitted via email.
- Revised instructions to emphasize human approval and secure processing on bonbook.co for sensitive operations.
- Minor wording and formatting improvements for greater clarity.
v2.2.9
- Renamed skill from "Bon Travel Agent" to "Travel Agent" for broader clarity.
- Updated skill description for conciseness and simplicity.
- Made introductory content and headings more concise and generic, reducing branded messaging.
- No changes to core skill features, requirements, or workflow.
v2.2.7
- Clarified that this skill requires agents to already have email send/receive permissions; skill does not grant or manage them.
- Refactored metadata to concise frontmatter and restructured documentation for better readability.
- Emphasized that no credentials, tokens, or persistent privilege are used or required.
- Updated privacy, security, and consent language for better transparency.
- No functional change to how booking, changing, or canceling flights works—adjustments are limited to wording and documentation structure.
v2.1.6
- Added a structured "METADATA" section to the documentation, improving clarity and organization.
- Corrected and standardized property names (e.g., `require-explicit: true`, `agent-credential-access`, `skill-persistence-and-privilege`).
- Updated documentation formatting and headings for consistency.
- No changes to core functionality.
v2.0.9
Version 2.0.9
- Updated metadata to include new fields: `disable-model-invocation: true`, `require-explicit`, and specific agent permission tags.
- Clarified agent and human roles regarding email inbox and calendar access.
- Enhanced setup instructions: agents must skip optional profile fields unless approved and all payment must be completed by the human.
- Improved guidance on security and consent, highlighting stricter compliance for agent-initiated actions.
- Refined language throughout for conciseness, clear operation, and consistent terminology.
v1.9.0
Version 1.9.0 introduces enhanced privacy, security, and consent documentation:
- Added detailed sections on permissions, consent, persistence, and credential management.
- Clarified that the skill does not require persistent permissions, privileged information, or direct access to user email inboxes.
- Outlined encryption and compliance practices around sensitive payment and traveler information.
- Described strict requirements for explicit human consent and agent responsibilities.
- Added a README file.
v1.0.8
No changes detected in version 1.0.8.
- No file or documentation updates were made in this release.
v1.8.4
- Reformatted all instructions and example steps into code-style blocks for enhanced readability.
- Minor text adjustments for consistency and clarity (e.g., "PRIVACY amd TERMS" corrected to "PRIVACY and TERMS").
- No functional or content changes to workflows, features, or supported actions.
v1.8.3
Readability.
v1.8.2
Formatting and summary added.
v1.8.1
Markdown formatting.
v1.8.0
Initial upload
元数据
常见问题
Travel Agent Skill 是什么？
Find, book, and change flights for your human via email. One message, and done. (by BonBook). 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 3751 次。
如何安装 Travel Agent Skill？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install travel-agent」即可一键安装，无需额外配置。
Travel Agent Skill 是免费的吗？
是的，Travel Agent Skill 完全免费（开源免费），可自由下载、安装和使用。
Travel Agent Skill 支持哪些平台？
Travel Agent Skill 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Travel Agent Skill？
由 BonBook（@aszelem）开发并维护，当前版本 v2.4.1。
推荐 Skills