TripAI

官方携程问道旅行技能。尤其擅长处理复杂、口语化的中文旅行查询，能一句话搞定酒店、机票、火车票、景点门票、一日游及演出展览的混合需求。

This skill appears coherent for a Ctrip travel-api integration, but review these before enabling: 1) Confirm you obtained TRIPAI_API_KEY from the official Ctrip link in SKILL.md and that the endpoint (wendao-skill-prod.ctrip.com) is expected. 2) Be aware the skill will persist your API key in plaintext at ~/.config/tripai-skill/api_key; if that is a concern, prefer setting the env var at runtime and avoid letting the agent write the file. 3) If you keep the file, set restrictive permissions (chmod 600) and delete/rotate the key if you later revoke access. 4) The skill makes network calls to Ctrip — only install if you trust the service and the published homepage. 5) Because this is instruction-only, there is no bundled code to review; ensure the runtime environment's curl/jq binaries are from trusted sources.

Type: OpenClaw Skill Name: tripai-skill Version: 1.0.4 The skill provides an interface to Ctrip's 'Wendao' AI travel service, allowing users to query travel information via a natural language interface. It follows standard practices by requiring an API key (TRIPAI_API_KEY) and optionally storing it in a local configuration file (~/.config/tripai-skill/api_key). The core logic involves sending user queries via curl to a legitimate Ctrip endpoint (wendao-skill-prod.ctrip.com). No evidence of data exfiltration, malicious execution, or prompt injection was found in SKILL.md or _meta.json.