ClawHub

rpg-travel: Game Pilgrimage · RPG 旅行：游戏圣地巡礼

v1.0.6

Map game scenes to real-world travel plans with RPG-style adventure maps. Requires python3 and FlyAI CLI with configured credentials to query real flight/hot...

⭐ 2· 47·0 current·0 all-time
byshaokun@shaokunv1
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The code and runtime instructions line up with the description: identify game/locations, call FlyAI CLI for flights/hotels/POI, assemble JSON and run python3 scripts to generate HTML/text outputs. Required binaries (python3, flyai) are appropriate. Minor inconsistency: clawhub.json declares a required credential named 'flyai_account' while the SKILL.md and registry metadata show no required env vars; this is plausible (FlyAI credentials are expected to be configured in the FlyAI CLI) but the package metadata and SKILL.md are not fully consistent.
✓
Instruction Scope
The SKILL.md instructions stay within the claimed scope: use web_fetch/websearch for filming locations, use FlyAI CLI to fetch booking data, collect user preferences with ask_user_question, build JSON and run local Python scripts. The instructions do not ask the agent to read arbitrary system files or environment variables beyond expecting FlyAI CLI to be configured. They do instruct embedding remote image URLs and Fliggy purchase links in generated HTML (see privacy note).
✓
Install Mechanism
Install spec is limited: only a brew formula for python3 is declared. The included setup.sh performs checks and prints installation hints but does not download remote archives or run unknown installers. No suspicious download URLs or archive extractions were seen in the provided files.
ℹ
Credentials
The skill relies on the FlyAI CLI and so requires FlyAI account credentials in the CLI configuration; the skill does not request env vars or ask users to paste credentials into chat. clawhub.json mentions 'flyai_account' as a required credential (consistent with needing FlyAI access) but the SKILL.md does not declare any env vars — this is explainable but a metadata mismatch. Also, generated outputs embed external image and purchase URLs; opening the HTML will cause your client to contact third parties (IP/User-Agent exposure).
✓
Persistence & Privilege
The skill does not request 'always: true' or any elevated platform privileges. It writes output files to the current working directory only and its setup script only checks for dependencies; no evidence of modifying other skills or system-wide configuration was found.
Assessment
What to consider before installing/running: - FlyAI credentials: the skill expects you to have the FlyAI CLI installed and authenticated. Do NOT paste credentials into chat; configure them with the FlyAI CLI tooling (e.g., flyai login) as recommended. - Privacy: generated HTML embeds external image URLs (Steam, HDQWalls, PAKUTASO, Wikimedia, and Fliggy links). Opening the HTML in a browser will make client-side GET requests to those hosts and reveal your IP/User-Agent. If you care about privacy, download images locally or open the HTML in an environment with network restrictions. - Metadata mismatch: package metadata mentions a 'flyai_account' credential while SKILL.md lists no env vars — this is likely because FlyAI uses its own CLI config, but verify before granting any credentials. - Inspect outputs: the Python scripts generate files in the current directory and reference external URLs. Review generated HTML/TXT before sharing or publishing (copyright concerns for screenshots/plot text may apply). - Run in isolation if unsure: use a disposable environment (container/VM) to run the setup and generation once, so you can confirm behavior. If you want, I can flag the exact lines where external hosts and Fliggy links are referenced or point out the files you should open and inspect first.

Like a lobster shell, security has layers — review code before you run it.

latestvk974degvkme0d95hkc8kwsactn84261t

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

Binspython3, flyai

Install

Homebrew
Bins: python3
brew install python3

Comments