Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Travel Planner

v1.0.0

智能旅行规划助手 - 支持行程规划、预算管理、景点推荐、交通查询、酒店比价、 packing清单生成。Use when: (1) 用户需要规划旅行行程或 vacation, (2) 需要推荐目的地或景点, (3) 需要计算旅行预算, (4) 需要查询交通路线/航班/火车, (5) 需要生成 packing 清单,...

0· 56·0 current·0 all-time
byLv Lancer@kaiyuelv

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for kaiyuelv/smart-travel-planner.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Travel Planner" (kaiyuelv/smart-travel-planner) from ClawHub.
Skill page: https://clawhub.ai/kaiyuelv/smart-travel-planner
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install smart-travel-planner

ClawHub CLI

Package manager switcher

npx clawhub@latest install smart-travel-planner
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
high confidence
!
Purpose & Capability
The skill's name and description match a travel planner. However, SKILL.md and quick-start examples reference scripts (recommend_attractions.py, transport_query.py, hotel_search.py, trip_share.py) and a doc (api-reference.md) that are not present in the file manifest. The exporter claims PDF/Excel/calendar output but the provided itinerary_exporter.py only supports text and CSV. These missing files and overstated features are inconsistent with the declared capabilities.
!
Instruction Scope
Runtime instructions are mostly local CLI invocations of the included Python scripts and a pip install. They do call out to public APIs (exchangerate-api.com and open-meteo.com) in the provided scripts, which is expected for currency and weather lookups. No instructions ask the agent to read unrelated system files or environment variables. The concern is that the SKILL.md gives examples using non-existent scripts and references an api-reference.md that isn't in the package, making the runtime behaviour unclear.
Install Mechanism
There is no packaged installer; SKILL.md instructs users to run pip install -r requirements.txt. The requirements are common Python libraries (requests, geopy, pandas, jinja2, openpyxl). No remote arbitrary downloads or extract-from-URL steps are present in the manifest.
Credentials
The skill declares no required environment variables, no primary credential, and no config paths. The included scripts make network requests to public APIs but do not require secrets or credentials. This is proportionate to a travel planner.
Persistence & Privilege
The skill is not configured as always:true and does not claim to modify other skills or system-wide configuration. It is user-invocable and can be run by the agent, which is normal for skills.
What to consider before installing
This package largely looks like a local travel-planner tool, but there are clear inconsistencies you should resolve before trusting it: (1) SKILL.md and examples reference several scripts (recommend_attractions.py, transport_query.py, hotel_search.py, trip_share.py) and a documentation file (api-reference.md) that are not included — ask the publisher why they are missing. (2) The exporter advertises PDF/Excel/calendar export yet the provided exporter only writes text/CSV; verify promised features exist. (3) The included scripts perform network requests to public APIs (exchange rate and weather); run them in a sandbox or isolated environment if you are concerned about network activity. (4) Inspect the code locally (the Python scripts are readable) and run pip install in a virtual environment before executing. If you cannot obtain a complete, consistent package from a trusted source, avoid installing or running it with sensitive credentials or on production systems.

Like a lobster shell, security has layers — review code before you run it.

latestvk976s7mrcf39qnbkf8hrnm5f0s85htm0
56downloads
0stars
1versions
Updated 3d ago
v1.0.0
MIT-0

Travel Planner

智能旅行规划全能工具集,基于 Python + 多数据源 API 实现。

核心能力

1. 行程规划

  • 多目的地行程路线优化
  • 每日行程自动生成(考虑交通时间、景点开放时间)
  • 兴趣标签匹配(历史/自然/美食/购物/冒险)
  • 旅行时长智能建议

2. 预算管理

  • 分项预算模板(交通/住宿/餐饮/门票/购物)
  • 实时汇率转换
  • 预算与实际花费对比
  • 多人分摊计算

3. 景点推荐

  • 基于位置和兴趣的景点推荐
  • 热门景点 + 小众 hidden gems
  • 景点评分、开放时间、门票价格
  • 路线距离与时间估算

4. 交通查询

  • 航班查询与比价
  • 火车/高铁时刻查询
  • 公交/地铁路线规划
  • 租车比价

5. 酒店比价

  • 多平台价格比较
  • 按区域/价格/评分筛选
  • 酒店设施标签筛选

6. Packing 清单

  • 基于目的地气候的衣物建议
  • 活动类型装备清单(徒步/潜水/滑雪)
  • 证件/电子设备/药品 checklist
  • 多人出行清单合并

快速开始

# 生成完整行程
python3 scripts/plan_trip.py --destination "东京" --days 5 --interests "美食,购物,历史" --output trip_plan.json

# 预算计算
python3 scripts/budget_calculator.py --destination "巴黎" --days 7 --travelers 2 --output budget.json

# 景点推荐
python3 scripts/recommend_attractions.py --city "京都" --interests "寺庙,自然" --output attractions.json

# 生成 packing 清单
python3 scripts/packing_list.py --destination "冰岛" --days 10 --activities "徒步,观鲸,温泉" --output packing.json

# 汇率转换
python3 scripts/currency_converter.py --amount 1000 --from USD --to CNY

依赖安装

pip install -r requirements.txt

核心依赖:requests, geopy, python-dateutil, jinja2, pandas, openpyxl

脚本说明

脚本功能
plan_trip.py完整行程规划生成
budget_calculator.py旅行预算计算与管理
recommend_attractions.py景点推荐引擎
transport_query.py交通查询(航班/火车/公交)
hotel_search.py酒店搜索与比价
packing_list.py智能 packing 清单生成
currency_converter.py实时汇率转换
weather_forecast.py目的地天气预报
itinerary_exporter.py行程导出(PDF/Excel/日历)
trip_share.py行程分享与协作

详细用法

参见 references/ 目录:

  • destinations-database.md - 热门目的地数据库
  • budget-templates.md - 预算模板参考
  • api-reference.md - 脚本 API 参考

Comments

Loading comments...