Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for gaogao605/fbt-travel.
Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "fbt-travel" (gaogao605/fbt-travel) from ClawHub.
Skill page: https://clawhub.ai/gaogao605/fbt-travel
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required binaries: python3
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.
Command Line
CLI Commands
Use the direct CLI path if you want to install manually and keep every step visible.
OpenClaw CLI
Bare skill slug
openclaw skills install fbt-travel
ClawHub CLI
Package manager switcher
npx clawhub@latest install fbt-travel
Security Scan
Capability signals
Requires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
Name/description (corporate travel booking) match the included files and behavior: hotel and flight search/booking, change/refund flows, formatting and order creation. Required binary is only python3 which is appropriate. No unrelated service credentials or unrelated binaries are requested.
ℹ
Instruction Scope
SKILL.md instructs the agent to run the bundled Python scripts (check_auth.py, hotel_api.py, flight_* scripts) and to perform demand-confirmation dialogs before calling APIs. The instructions explicitly suppress auth-check output (silent/background check). This is coherent with the skill's UX goals but means the agent will read local auth files and call network APIs without surfacing those checks unless needed.
✓
Install Mechanism
No external install/downloads; code is bundled in the skill. requirements.txt only lists 'requests'. No remote arbitrary-code fetch or extractor URLs were used.
ℹ
Credentials
The skill does not request environment variables but reads/writes auth files in the user's home (~/.fbt_auth.json and ~/.fbt-auth.json) and writes temporary json files (seat/price caches). That file access is expected for persistent tokens but is a privacy consideration: the skill will store identity tokens and may accept/send PII (phone numbers, passenger names, ID numbers) during booking operations.
ℹ
Persistence & Privilege
always:false and no elevated platform privileges. The skill persists tokens/config by writing files to the user's home directory and temp files — expected for client-side credential caching, but it does modify user files on disk. It does not change other skills or system-wide settings.
Assessment
This skill appears coherent for interacting with Fenbeitong APIs; before installing, consider: (1) it will store authentication tokens in your home directory (~/.fbt_auth.json and ~/.fbt-auth.json) and write temporary JSON files — review/clean those files if needed; (2) you will be asked to provide phone numbers and, at booking time, passenger names and ID numbers — only provide PII when you trust the endpoint; (3) network calls go to app-gate.fenbeitong.com (the code contains that domain and a default test token); (4) the skill suppresses auth-check output by design, so authentication checks happen quietly; (5) validate any payment links before clicking (the code returns pay_url values and formats them as links). If you need higher assurance, inspect the bundled scripts locally or run them in an isolated environment before granting broader agent access.
Like a lobster shell, security has layers — review code before you run it.
