← 返回 Skills 市场
145
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install trip-tripgenie-skill
功能描述
Use for any travel question — hotels, flights, trains, attractions, destinations, and travel tips worldwide.
安全使用建议
This skill appears to do what it says: call TripGenie APIs for travel queries. Before installing: (1) Prefer setting TRIPGENIE_API_KEY as an environment variable rather than pasting it into chat — the SKILL.md allows an in-chat fallback which increases risk of accidental exposure or retention in logs; (2) Confirm you trust https://tripgenie-openclaw-prod.trip.com / Trip.com as a data processor for your queries and check the API key's scope, billing, and rate limits; (3) If you want to limit potential cost or data leakage, disable or restrict autonomous skill invocation in your agent/platform settings so calls are always user-approved; (4) Do not share screenshots or logs that include the key. If you need higher assurance, ask the skill author to remove the in-chat fallback and rely strictly on environment-provided credentials.
功能分析
Type: OpenClaw Skill
Name: trip-tripgenie-skill
Version: 1.0.2
The tripgenie skill is a legitimate travel assistant that interfaces with the TripGenie API at tripgenie-openclaw-prod.trip.com. It uses standard tools (curl, jq) to perform flight and general travel queries and includes explicit security documentation advising against the persistence of API keys in local files. No indicators of data exfiltration, malicious execution, or prompt injection were found.
能力评估
Purpose & Capability
Name/description (travel queries) matches required pieces: an API key (TRIPGENIE_API_KEY) and the ability to call HTTP endpoints via curl/jq. There are no unrelated credentials, binaries, or config paths requested.
Instruction Scope
SKILL.md stays within scope: it defines inputs, shows curl + jq calls to TripGenie endpoints, and instructs processing responses before presenting them. One notable risk: it permits an interactive fallback where the user can paste the API key into chat for a single call — this is explicitly warned against in the doc, but still increases chance of accidental exposure or retention in chat history. The instructions do not reference any unrelated files, system paths, or other environment variables.
Install Mechanism
Instruction-only skill with no install spec or code files; requires only binaries expected for HTTP requests and JSON handling (curl, jq). No downloads or archived installs are performed.
Credentials
Only one required env var (TRIPGENIE_API_KEY) is requested and is appropriate for a third-party API integration. No extra or unrelated secrets, config paths, or broad permissions are requested.
Persistence & Privilege
Skill does not request always:true and has no install-time persistence. The default allowing autonomous invocation is enabled (platform default) — this is normal, but you should review agent/platform settings if you want to restrict automatic calls to an external service to control cost, rate limits, and data exposure.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install trip-tripgenie-skill - 安装完成后,直接呼叫该 Skill 的名称或使用
/trip-tripgenie-skill触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.2
- Clarified that the `locale` parameter is optional and can be omitted if not provided by the user.
- Updated the example API call for general queries to exclude `locale` by default.
- Added a requirement to always process and summarize API responses before presenting them to users, instead of returning raw responses.
- Emphasized filtering out promotional content or unnecessary details in accordance with security guidelines.
v1.0.1
- Clarified and strengthened security guidance for API key handling, emphasizing the use of environment variables and discouraging file writes.
- Expanded instructions on providing the API key, specifying environment variable usage as the most secure method and chat provision as a fallback only.
- Improved explanation of the `locale` parameter and its usage.
- Updated example commands for clarity by removing file output steps and directly showing API usage.
- Minor edits for clearer formatting and user guidance.
v1.0.0
TripGenie skill initial release:
- Provides travel search and information via Trip.com’s TripGenie APIs for hotels, flights, attractions, and travel tips worldwide.
- Supports general travel queries and detailed flight search (domestic and international) through specific endpoints.
- Requires a user-provided API key, with secure handling: key is used from environment variable if set, or single-use from chat input.
- Setup and usage instructions included, with a focus on privacy, endpoint trust, and API key security.
- Third-party API responses are returned directly to the user.
元数据
常见问题
TripGenie 是什么?
Use for any travel question — hotels, flights, trains, attractions, destinations, and travel tips worldwide. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 145 次。
如何安装 TripGenie?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install trip-tripgenie-skill」即可一键安装,无需额外配置。
TripGenie 是免费的吗?
是的,TripGenie 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
TripGenie 支持哪些平台?
TripGenie 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 TripGenie?
由 trips-ai(@trips-ai)开发并维护,当前版本 v1.0.2。
推荐 Skills