travel-city-game(旅行游戏副本生成器)
Security checks across malware telemetry and agentic risk
Overview
The skill's code and runtime instructions are coherent with its stated purpose (using the flyai CLI to build a 3-node travel H5 page); no requests for unrelated credentials or suspicious network endpoints were found, though a few minor inconsistencies and local-file behaviors are worth noting before installation.
This skill appears to do what it says: it uses the flyai CLI to gather product data and builds a local H5 page. Before installing: 1) Ensure you trust the flyai Skill/CLI (it will be invoked and may use your FLYAI_API_KEY if you configure one). 2) Note the skill expects python3 and will write preview HTML under an outputs/ directory and a PID file (~/.city-game-serve.pid) in your home; the serve script may send SIGTERM to a previous serve.py process only after verifying the process identity. 3) The manifest lists 'node' though Node.js isn't used by the included Python workflow — you can ignore Node unless you plan other integrations. 4) The SKILL.md advises safe subprocess use, but never run unexpected installation commands (it warns against auto-installing flyai). If you rely on flyai and are comfortable granting a CLI access to your FLYAI_API_KEY, this skill is coherent and proportionate.
SkillSpector
SkillSpector findings are pending for this release.
VirusTotal
VirusTotal findings are pending for this skill version.