← 返回 Skills 市场
1495
总下载
2
收藏
0
当前安装
6
版本数
在 OpenClaw 中安装
/install travel-companion
功能描述
Plan, manage, and enhance trips with real place data, interactive maps, and on-trip features at aizzie.ai. Trigger whenever the user mentions trips, travel,...
安全使用建议
This skill appears to do what it says — integrate with Aizzie to create shareable travel plans — but exercise caution before letting an agent run it. The SKILL.md tells the agent to run `npx @aizzie/cli@latest`, which will download and execute remote JavaScript code at runtime; the package is not pinned or checksummed and the skill metadata fails to declare required binaries (node/npx). Before installing or running: (1) verify the @aizzie/cli package on npm/GitHub (check source, maintainers, and recent releases), (2) prefer a pinned version or checksum instead of @latest, (3) ensure you are comfortable allowing the agent to run remote code in your environment (or run in an isolated/sandboxed environment), and (4) if you need tighter controls, ask the publisher for an explicit install spec or a vetted hosted API approach rather than runtime npx execution.
功能分析
Type: OpenClaw Skill
Name: travel-companion
Version: 1.0.5
The skill relies on executing remote code via `npx @aizzie/cli@latest`, which involves high-risk shell and network access. While this behavior is aligned with the stated purpose of travel planning through the aizzie.ai service, the use of unpinned remote packages in `SKILL.md` presents a significant supply-chain risk and potential for unauthorized execution if the package is compromised. No explicit malicious intent was found, but the capability is inherently risky.
能力评估
Purpose & Capability
The skill's purpose (creating persistent, shareable travel plans at aizzie.ai) aligns with the SKILL.md content. However, the metadata claims no required binaries while the instructions explicitly require running `npx @aizzie/cli@latest` (which implies Node/npx must be available). This mismatch is a minor but noteworthy inconsistency.
Instruction Scope
Instructions are narrowly scoped to travel planning and to using the Aizzie CLI. They do not request reading local files, accessing environment secrets, or transmitting unrelated data. The only runtime action beyond pure text generation is repeatedly instructing the agent to run `npx @aizzie/cli@latest` (and `npx @aizzie/cli docs`), which will cause a network fetch and execution of third‑party code.
Install Mechanism
There is no install spec in the registry metadata, but the SKILL.md instructs runtime use of `npx @aizzie/cli@latest`. That causes npm to download and execute code from the public registry at runtime; the skill provides no pinned version, checksum, or provenance. This is a moderate risk because arbitrary remote JavaScript can run when the agent follows the instruction.
Credentials
The skill declares no required environment variables, no credentials, and no config paths, and the instructions do not reference secrets or unrelated env vars. The requested access is proportionate to the described functionality.
Persistence & Privilege
The skill is not marked always:true, does not request persistent system-wide changes in the metadata, and does not declare special privileges. Autonomous invocation is allowed (platform default) but is not combined with broad credentials or always:true here.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install travel-companion - 安装完成后，直接呼叫该 Skill 的名称或使用
/travel-companion触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.5
- Added mention of real-time collaboration, allowing multiple users to edit the same trip with live updates across all devices.
- Improved feature list to better highlight shareable trip plans and collaborative editing.
v1.0.4
- Updated setup instructions: commands now use `npx @aizzie/cli@latest`.
- Removed detailed authentication guidance and tips about not asking for email upfront.
- Streamlined documentation for clarity and brevity.
- No functional changes to the skill, documentation update only.
v1.0.3
- Updated setup instructions to use `npx @aizzie/cli` instead of global install with npm.
- Added guidance to force the latest version using `npx @aizzie/cli@latest` if commands fail or features are missing.
- Revised first step instructions to use `npx @aizzie/cli docs`.
- No changes to app features or workflow.
v1.0.2
- Added a homepage field with link to https://aizzie.ai in the skill metadata.
- No other user-facing changes.
v1.0.1
No user-facing changes in this version.
No file or content updates detected.
v1.0.0
- Initial release of the travel-companion skill.
元数据
常见问题
Travel Companion 是什么？
Plan, manage, and enhance trips with real place data, interactive maps, and on-trip features at aizzie.ai. Trigger whenever the user mentions trips, travel,... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 1495 次。
如何安装 Travel Companion？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install travel-companion」即可一键安装，无需额外配置。
Travel Companion 是免费的吗？
是的，Travel Companion 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Travel Companion 支持哪些平台？
Travel Companion 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Travel Companion？
由 Chris Lam（@hehachris）开发并维护，当前版本 v1.0.5。
推荐 Skills