Tennis Grand Slam Trip Planner For Slam Chasers
v1.0.1When a user mentions watching tennis, Grand Slam travel, or planning a trip to the Australian Open, French Open (Roland Garros), Wimbledon, or US Open, activ...
⭐ 0· 42·0 current·0 all-time
by@lokwq
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description match the actual behavior: the skill queries a travel/search service (flyai) for flights, hotels, tickets and POIs and assembles an itinerary. The included shell script and reference data are appropriate for this purpose.
Instruction Scope
SKILL.md and the script limit operations to reading included reference files, calling the flyai CLI, running date, and writing JSON results to /tmp for assembly. The instructions do not attempt to read unrelated system files or secret environment variables.
Install Mechanism
There is no install spec in the registry, but the skill requires the external flyai CLI (recommended install: npm i -g @fly-ai/flyai-cli). Requiring the user to install a third‑party npm package is normal for this use case but introduces the usual supply‑chain/network risk (verify the CLI source before installing).
Credentials
The skill declares no required env vars or credentials, which is consistent with being an instruction-only skill. However, the flyai CLI it invokes will likely require authentication/configuration (tokens or config stored locally). Those credentials are not declared by the skill — expected but worth noting: the skill will use whatever flyai credentials are present in the runtime environment.
Persistence & Privilege
always is false, the skill does not request persistent/autonomous privileges, and it does not modify other skills or global agent configuration. It writes temporary JSON to /tmp which is normal for a helper script.
Assessment
This skill appears to do what it says: it runs the flyai CLI to fetch flights, hotels, tickets and POIs and uses included templates to build a Markdown itinerary. Before installing/running: (1) verify you trust the flyai CLI (npm package @fly-ai/flyai-cli) and inspect its auth/storage behaviour (it will likely need an API token or local config), (2) be aware the script writes raw search results to /tmp/slam-trip-results — these may contain third‑party links or booking URLs, so verify links before clicking or entering payment details, (3) install the CLI from the vendor's official source (or review its code) to avoid supply‑chain risk, and (4) don't run with elevated privileges. If you require the skill to explicitly declare what credentials it will use, ask the skill author to list the flyai credential variables or documentation for where the CLI stores tokens.Like a lobster shell, security has layers — review code before you run it.
latestvk977hnwmgfgh3x1f51kzxme90x8408c3
License
MIT-0
Free to use, modify, and redistribute. No attribution required.