多目的地航线组合比价助手
ReviewAudited by ClawScan on May 10, 2026.
Overview
This flight-comparison skill is mostly purpose-aligned, but it tells the agent to disable TLS certificate checks for all FlyAI searches, which can make flight queries and booking links easier to intercept or tamper with.
Review this skill before installing. Its flight-search behavior matches its purpose, but you should be comfortable with it saving travel preferences and, more importantly, with its insecure TLS workaround. Prefer a version that fixes certificate validation instead of using NODE_TLS_REJECT_UNAUTHORIZED=0.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A network attacker or misconfigured proxy could potentially observe or alter flight search results or booking URLs more easily than with normal TLS validation.
The skill directs all core flight-search commands to disable TLS certificate validation, which weakens protection for network calls that carry user travel details and return booking links.
⚠️ **重要**：所有命令执行前需加 `NODE_TLS_REJECT_UNAUTHORIZED=0` 解决 SSL 证书验证问题
Do not disable TLS verification by default. Fix the certificate issue properly, pin or trust the correct certificate authority, or clearly ask the user before using this insecure workaround.
The skill may fail or behave differently depending on what `flyai` binary is installed in the environment.
The skill relies on a local FlyAI CLI for its main function, but the registry requirements declare no required binaries and there is no install specification, leaving users to trust an external preexisting tool.
本技能主要使用以下搜索命令：`search-flight` ... `keyword-search` ... `NODE_TLS_REJECT_UNAUTHORIZED=0 flyai search-flight`
Declare the FlyAI CLI requirement, its expected source/version, and any setup assumptions in metadata or installation documentation.
Future sessions may reuse stored travel preferences or departure-city information, which can be convenient but may reveal personal travel patterns.
The skill explicitly reads and updates persistent memory containing personal travel preferences and common travel details.
记住用户的出发城市、偏好、常用同行人等... **启动时读取**：使用 `search_memory` 查询用户画像 ... **实时更新**：用户提供新信息时更新 Memory
Clearly tell users what travel information will be saved, allow them to opt out, and avoid storing unnecessary details such as companion information unless the user wants it.