📦 travel-city-game — 旅行副本生成器
v1.0.9输入城市名，自动抓取 flyai 景点、体验、美食数据，生成 3 节点游戏化叙事 H5 行程，含 AI 故事文案与飞猪真实预订链接，一键打造沉浸式旅行副本。
3· 257·0 当前·0 累计
by 下载技能包
最后更新
2026/4/8
安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears to do what it says: it uses the flyai CLI to gather product data and builds a local H5 page. Before installing: 1) Ensure you trust the flyai Skill/CLI (it will be invoked and may use your FLYAI_API_KEY if you configure one). 2) Note the skill expects python3 and will write preview HTML under an outputs/ directory and a PID file (~/.city-game-serve.pid) in your home; the serve script may send SIGTERM to a previous serve.py process only after verifying the process identity. 3) ...详细分析 ▾
ℹ 用途与能力
The skill's stated goal (call flyai to find products and produce an H5 game page) matches the instructions and included files. It requires the flyai CLI and python3 which are appropriate. Minor mismatch: the compatibility section lists 'node' as a required binary but SKILL.md and the included Python serve script do not require Node at runtime — this appears unnecessary.
✓ 指令范围
SKILL.md instructs the agent to call the flyai CLI, parse JSON, generate stories, and render an HTML output under outputs/. It explicitly warns about shell-injection risks and prescribes safe subprocess usage. The instructions do not ask the agent to read unrelated files or exfiltrate data to unknown endpoints. They do advise the user to set FLYAI_API_KEY if rate-limited (see environment note).
✓ 安装机制
There is no remote install step or arbitrary download. The skill ships as instruction + local files (template HTML and a Python serve script). No install URL or third-party archive is used, so installation risk is low.
ℹ 凭证需求
The skill's manifest lists no required environment variables, which is broadly proportional. SKILL.md, however, instructs users to set FLYAI_API_KEY if they encounter rate limits — this is reasonable for a CLI-backed integration but the manifest does not declare this optional credential. The skill does not request unrelated secrets.
ℹ 持久化与权限
The skill does not request always:true and does not modify other skills. The included serve.py writes a PID file to the user's home (~/.city-game-serve.pid), attempts to detect and (only if identity matches) SIGTERM a previous instance, and opens a local HTTP server to preview generated HTML. These are expected for a local preview tool but involve writing a small PID file and sending SIGTERM to a verified process — users should be aware of this local footprint.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.92026/4/2
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install travel-city-game
镜像加速npx clawhub@latest install travel-city-game --registry https://cn.longxiaskill.com