← 返回 Skills 市场
Zoo Aquarium
作者
xiejinsong
· GitHub ↗
· v3.2.0
· MIT-0
103
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install zoo-aquarium
功能描述
Find zoos, aquariums, safari parks, and wildlife sanctuaries. Great for families and animal lovers. Also supports: flight booking, hotel reservation, train t...
安全使用建议
Proceed with caution. Key concerns: (1) The skill claims to be ‘powered by Fliggy’ but instructs use of a different CLI (@fly-ai/flyai-cli) — ask the publisher for the authoritative source and repository URL. (2) The SKILL.md requires installing a global npm package without a supplied homepage or repo; do NOT install a global package you cannot inspect. If you test, do so in an isolated environment (container/VM) and audit the package source before installing. (3) The skill may write an execution log containing raw user queries to .flyai-execution-log.json — this can capture sensitive input. Confirm whether logs are retained, where they are stored, and how they are protected. (4) Ask the author to provide: the CLI repository URL, package integrity info (checksum or signed release), explicit documentation for all claimed features (flights/hotels/visa), and a privacy statement for logs. If these are not provided, avoid installing the skill or run it only in a sandboxed environment.
功能分析
Type: OpenClaw Skill
Name: zoo-aquarium
Version: 3.2.0
The skill bundle mandates the global installation and execution of a third-party NPM package (@fly-ai/flyai-cli) as a prerequisite for any functionality, which is a high-risk behavior. The instructions in SKILL.md and references/fallbacks.md use aggressive prompt engineering to force the agent to install this package and forbid the use of internal knowledge, effectively mandating shell execution. While these actions are plausibly related to the stated travel search purpose, the requirement for high-privilege global installation and the strict execution rules represent a significant supply-chain risk.
能力评估
Purpose & Capability
The skill description claims it's “powered by Fliggy (Alibaba Group)” and advertises broad travel features (flights, hotels, visas), but the runtime instructions exclusively call a third-party CLI named @fly-ai/flyai-cli and only document attraction/POI searches. The advertised provider (Fliggy) does not match the CLI referenced (flyai), and the claimed capabilities (booking flights/hotels/visas) are not supported or documented in the playbooks — this is an unexplained mismatch.
Instruction Scope
SKILL.md forces the agent to obtain all data exclusively via the flyai CLI and forbids using training data. It also includes internal runbook instructions that may write an execution log (.flyai-execution-log.json) containing raw user queries and commands. The instructions therefore expand the agent's runtime behavior (global npm install, CLI execution, potential file writes) beyond a simple read-only query skill.
Install Mechanism
There is no install spec in the registry metadata, but the SKILL.md mandates installing a global npm package (npm i -g @fly-ai/flyai-cli) if the CLI is missing. Installing a global npm package from an unverified source is moderate-to-high risk because the package code cannot be inspected via the registry metadata. The skill gives no repository URL, official vendor domain, or cryptographic verification for that package.
Credentials
The skill does not request credentials or environment variables (proportionate), which is good. However, its runbook suggests logging full request data (raw user_query) to disk if writable. Persisting queries may capture PII or sensitive user input — a privacy risk not disclosed in the manifest. No explicit network exfiltration patterns are present in SKILL.md, but the external CLI will perform network calls whose behavior is unknown.
Persistence & Privilege
The skill does not request elevated platform privileges and is not always-enabled. It does, however, instruct the agent to persist execution logs to a local file when possible which gives it a modest persistence footprint in the working directory. It does not request or modify other skills' configurations.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install zoo-aquarium - 安装完成后，直接呼叫该 Skill 的名称或使用
/zoo-aquarium触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v3.2.0
- Expanded skill to support itinerary planning, visa info, travel insurance, car rental, and more in addition to zoos and aquariums, powered by Fliggy (Alibaba Group).
- Enhanced critical execution rules: CLI output is now mandatory, and every response must include a `[Book]({detailUrl})` link.
- Updated activation and parameter instructions for improved accuracy and user experience.
- Added language-adaptive output; now responds in Chinese or English according to user input.
- Improved error handling and self-test procedures for CLI availability.
元数据
常见问题
Zoo Aquarium 是什么？
Find zoos, aquariums, safari parks, and wildlife sanctuaries. Great for families and animal lovers. Also supports: flight booking, hotel reservation, train t... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 103 次。
如何安装 Zoo Aquarium？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install zoo-aquarium」即可一键安装，无需额外配置。
Zoo Aquarium 是免费的吗？
是的，Zoo Aquarium 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Zoo Aquarium 支持哪些平台？
Zoo Aquarium 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Zoo Aquarium？
由 xiejinsong（@xiejinsong）开发并维护，当前版本 v3.2.0。
推荐 Skills