Domestic Flight Search
v0.1.0Query China domestic flights with schedules, airline details, airport resolution, and Juhe reference prices. Use when a user asks for domestic China flight o...
⭐ 0· 231·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the requested artifacts: the skill ships a Python script that queries Juhe's flight API, uses included city/airport mapping data, and declares JUHE_FLIGHT_API_KEY as the primary credential — all of which are expected for a Juhe-based flight lookup tool.
Instruction Scope
SKILL.md directs the agent to run the bundled Python CLI or optional local HTTP server and to obtain a Juhe API key before live queries. The runtime instructions reference only the included data files and the sample response; they do not ask the agent to read unrelated system files or exfiltrate arbitrary data. Note: the optional 'serve' mode opens a local HTTP endpoint (default 127.0.0.1) which will call Juhe using the environment API key — run only on trusted hosts and avoid binding to public interfaces.
Install Mechanism
No install spec is provided; this is instruction-plus-scripts only and requires python3 already on PATH. Nothing is downloaded or written to disk by an installer, which is low risk and proportional to the task.
Credentials
The skill requires a single provider credential (JUHE_FLIGHT_API_KEY, with fallback JUHE_API_KEY) which is necessary and sufficient to call the Juhe API. No unrelated secrets or system credentials are requested. The code reads only those env vars.
Persistence & Privilege
The skill is not forced-always and uses normal agent invocation. It does not modify other skills or system-wide agent settings. The only runtime persistence is an optional local HTTP service (user launches it explicitly).
Assessment
This skill appears to do what it claims. Before installing or running it: (1) obtain your own Juhe API key and set JUHE_FLIGHT_API_KEY (do not share this key); (2) run the CLI or local HTTP server only on machines you trust — avoid binding the server to a public interface so other hosts cannot trigger queries using your environment key; (3) review the included Python script if you will run it in an environment with sensitive data (it reads only the JUHE_* env vars and the included JSON mapping files); (4) when in doubt, run the test using the bundled sample response first to confirm behavior without contacting the provider.Like a lobster shell, security has layers — review code before you run it.
latestvk974rhywpr9rqc8amgprv0t2ms82qajf
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
✈️ Clawdis
Binspython3
EnvJUHE_FLIGHT_API_KEY
Primary envJUHE_FLIGHT_API_KEY