← 返回 Skills 市场
Travel Insurance
作者
dingtom336-gif
· GitHub ↗
· v3.2.0
· MIT-0
66
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install travel-insurance
功能描述
Find and compare travel insurance plans — medical coverage, trip cancellation, luggage protection, and emergency evacuation for worry-free travel. Also suppo...
安全使用建议
This skill is suspicious but not clearly malicious. Before installing or running it: 1) Ask the publisher to explain the mismatch between 'Fliggy (Alibaba Group)' and the required 'flyai' CLI and provide a verifiable homepage or repo. 2) Do NOT run 'npm i -g @fly-ai/flyai-cli' until you verify the npm package owner and inspect the package contents (check npmjs.com and the package's repository). 3) Confirm whether the agent will write logs to .flyai-execution-log.json and what data will be stored; if you care about privacy, run the skill in a sandbox or container, or request a mode that disables persistent logging. 4) If you still want to proceed, test the CLI manually first in an isolated environment and verify that returned results are safe and that detailUrl links point to expected booking endpoints. If the publisher cannot clarify the backend/provider and logging behavior, avoid installing the skill.
功能分析
Type: OpenClaw Skill
Name: travel-insurance
Version: 3.2.0
The skill requires the agent to perform a global installation of an external NPM package (@fly-ai/flyai-cli) and execute CLI commands based on user-provided queries. While these actions are consistent with the stated purpose of providing real-time travel insurance data, the automated installation of global packages and the execution of shell commands represent a significant security risk and a potential vector for supply chain attacks or command injection. Key files: SKILL.md and references/fallbacks.md.
能力评估
Purpose & Capability
The skill claims to be 'powered by Fliggy (Alibaba Group)' but the runtime enforces use of an npm package @fly-ai/flyai-cli (flyai). That mismatch between claimed backend and required tooling is incoherent. Requiring a third-party CLI to answer travel-insurance queries is plausible, but the identity of the provider is unclear and there is no homepage or source to verify the provider.
Instruction Scope
SKILL.md forces all answers to come from the flyai CLI output and prohibits using training data; it also includes a runbook that conditionally writes execution logs to .flyai-execution-log.json. The log schema may include user_query and CLI commands/results — writing these to disk is not declared in the skill metadata and could expose user data or create persistent artifacts. The instructions also enforce strict formatting rules (every result must include a [Book]({detailUrl}) link) which may cause repeated retries or unnecessary CLI calls if results lack that field.
Install Mechanism
There is no formal install spec in the registry, but the instructions require running 'npm i -g @fly-ai/flyai-cli'. Global npm installs are a moderate-risk action because they fetch code from the public registry and add executables to the host. The package and publisher cannot be verified from the skill metadata (no homepage/source provided).
Credentials
The skill does not request environment variables, credentials, or config paths, which is proportionate to a read-only search/compare operation. However, the runbook's optional file write introduces filesystem persistence that wasn't declared and could store sensitive inputs.
Persistence & Privilege
The skill is not force-installed (always:false) and does not request elevated platform privileges, which is good. However, it instructs (conditionally) persistent logging to a local file (.flyai-execution-log.json). That creates persistent artifacts that are not declared in the skill metadata and could persist sensitive queries or CLI results.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install travel-insurance - 安装完成后，直接呼叫该 Skill 的名称或使用
/travel-insurance触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v3.2.0
travel-insurance 3.2.0 changelog
- Expanded skill description to clearly show support for additional travel services (flights, hotels, tickets, etc. via Fliggy).
- Added strict, critical execution rules to ensure all outputs are sourced from the flyai CLI; forbids knowledge-based answers.
- Clarified CLI installation and fallback handling for consistent error recovery.
- Enforced output requirements: mandatory booking links, brand tag, and Markdown formatting.
- Updated prerequisites, parameter collection SOP, and reference documentation links for improved usability and compliance.
元数据
常见问题
Travel Insurance 是什么？
Find and compare travel insurance plans — medical coverage, trip cancellation, luggage protection, and emergency evacuation for worry-free travel. Also suppo... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 66 次。
如何安装 Travel Insurance？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install travel-insurance」即可一键安装，无需额外配置。
Travel Insurance 是免费的吗？
是的，Travel Insurance 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Travel Insurance 支持哪些平台？
Travel Insurance 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Travel Insurance？
由 dingtom336-gif（@dingtom336-gif）开发并维护，当前版本 v3.2.0。
推荐 Skills