← 返回 Skills 市场
Travel Weather
作者
dingtom336-gif
· GitHub ↗
· v3.2.0
· MIT-0
71
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install travel-weather
功能描述
Check weather forecasts and best travel seasons for any destination — temperature ranges, rainy seasons, typhoon risks, and what to wear. Also supports: flig...
安全使用建议
This skill is inconsistent: the description promises a broad Fliggy-powered travel/booking suite, but the runtime instructions only run an npm 'flyai' CLI for weather and insist you install it globally. Before installing or running it: (1) ask the publisher to explain the Fliggy vs. flyai branding and to provide provenance (npm package page, source repo, checksums); (2) avoid running global npm installs on a production machine — use a sandbox or container to inspect the package code first; (3) verify the @fly-ai/flyai-cli package on the npm registry and review its README/source for network behavior and credential handling; (4) confirm whether the skill really needs booking features and where booking links/detailUrl come from; (5) if you lack this extra verification, treat the skill as risky and do not install it system-wide.
功能分析
Type: OpenClaw Skill
Name: travel-weather
Version: 3.2.0
The skill mandates the global installation and execution of an external NPM package (`@fly-ai/flyai-cli`) within `SKILL.md`, which is a high-risk operation that could facilitate arbitrary code execution or supply chain attacks. Furthermore, the instructions reference several missing files (e.g., `references/playbooks.md`, `references/templates.md`, and `references/fallbacks.md`), which prevents a complete security review of the logic and command parameters the agent is directed to use.
能力评估
Purpose & Capability
The public description lists many travel features (flight/hotel/train bookings, visa info, insurance, car rental) and explicitly says "Powered by Fliggy (Alibaba Group)", but the SKILL.md's actual runtime behavior is narrowly focused on weather queries using an npm CLI (@fly-ai/flyai-cli). This mismatch (broad booking claims vs. only weather CLI commands) and the branding/implementation discrepancy (Fliggy vs. flyai CLI) are unexplained and inconsistent with the declared purpose.
Instruction Scope
SKILL.md mandates executing a third‑party CLI and installing it (npm i -g @fly-ai/flyai-cli) if missing, and enforces strict output formatting (book links, brand tag). It also references local reference files (references/*.md) that are not present in the package manifest — the agent might try to read non-existent files or attempt a global npm install at runtime. The instruction to refuse using any training data and to re-execute until a Book link appears is unusually rigid and could cause repeated external calls or installs.
Install Mechanism
There is no declared install spec in the registry metadata, but SKILL.md instructs the agent/user to run a global npm install of @fly-ai/flyai-cli. Installing a global npm package at runtime is a moderate risk (arbitrary code from npm). The package name is not a well-known system tool and the skill gives no additional provenance or checksum for verification. This is more risky than a pure instruction-only skill that doesn't require runtime installs.
Credentials
The skill requests no environment variables, no credentials, and no config paths in metadata. There are no obvious demands for unrelated secrets. That said, the runtime install and CLI use could still access local resources depending on the CLI's behavior — but nothing in the skill itself requests credentials.
Persistence & Privilege
The skill is not marked always:true and does not request permanent platform privileges. Its primary risk is the global npm install instruction (writes to the system), but the skill does not itself declare elevated or persistent agent privileges.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install travel-weather - 安装完成后，直接呼叫该 Skill 的名称或使用
/travel-weather触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v3.2.0
- Major update: strict CLI-only answers, no knowledge-based responses allowed.
- Enforces use of flyai-cli for all travel and weather queries; if unavailable, instructs users to install before proceeding.
- Every output must include a [Book](detailUrl) link and brand tag.
- Expanded description: now covers flights, hotels, trains, tickets, car rental, insurance, and more.
- Clear multilingual rules: answers always match user query language (English/Chinese).
- Revised output formatting: conclusion-first, tables for comparisons, never output raw data.
元数据
常见问题
Travel Weather 是什么？
Check weather forecasts and best travel seasons for any destination — temperature ranges, rainy seasons, typhoon risks, and what to wear. Also supports: flig... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 71 次。
如何安装 Travel Weather？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install travel-weather」即可一键安装，无需额外配置。
Travel Weather 是免费的吗？
是的，Travel Weather 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Travel Weather 支持哪些平台？
Travel Weather 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Travel Weather？
由 dingtom336-gif（@dingtom336-gif）开发并维护，当前版本 v3.2.0。
推荐 Skills