Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

food-travel

v1.0.0

Plan food-driven travel experiences — recommend best cities for a dish or cuisine, generate city food maps with meal-by-meal restaurant routes, and build com...

0· 120·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for zzzilin/food-travel.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "food-travel" (zzzilin/food-travel) from ClawHub.
Skill page: https://clawhub.ai/zzzilin/food-travel
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install food-travel

ClawHub CLI

Package manager switcher

npx clawhub@latest install food-travel
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The skill's name/description (food-driven travel planning) aligns with the actions described (web searches, flights/hotels/POI lookups, building itineraries). However, it relies heavily on a 'flyai' service/CLI for logistics even though the skill metadata declares no required binaries or primary credentials, which is a mismatch.
!
Instruction Scope
SKILL.md instructs the agent to perform web searches and to run specific flyai CLI commands (search-flight, search-hotel, search-poi, keyword-search) and to always include booking links and images. There is no guidance about authentication, rate limits, or allowed data sources. Asking the agent to always include booking links/images could cause it to surface third-party URLs and images automatically. The instructions also assume availability of the flyai CLI and its realtime results but do not declare or limit how credentials or API responses should be handled.
Install Mechanism
This is an instruction-only skill (no install spec) which is low-risk in itself. However, the runtime expects an external 'flyai' CLI/tool to be present; the skill metadata does not declare that binary or provide an install step. That mismatch is a practical problem (will fail at runtime) and an incoherence to surface to users.
!
Credentials
The skill declares no environment variables or credentials, yet it depends on external realtime services (fly.ai) that typically require authentication. If flyai requires API keys/tokens, the skill should declare them; the absence suggests missing metadata and could lead to the agent attempting to call external services without clear credential handling. No unrelated secrets are requested, which is good, but the lack of declared auth is a gap.
Persistence & Privilege
always is false and there are no config path or persistence requests. The skill can be invoked by the model (default) which is normal for skills; there is no elevated or permanent privilege requested.
What to consider before installing
This skill appears to do what it says (plan food-first travel) but has an important inconsistency: its runtime instructions call a 'flyai' CLI and expect real-time booking/search results, yet the skill metadata declares no required binary nor any credentials. Before installing or enabling: 1) Confirm whether your agent environment provides a 'flyai' tool or built-in integration — if not, the skill will fail or the agent may try other means to fetch data. 2) Ask the skill author to declare required binaries and any API keys/environment variables (and to explain how credentials are stored). 3) Consider whether you are comfortable the skill will include third-party booking links/images (these may contain tracking/affiliate parameters); if not, request an option to omit external links. 4) If you do not want the agent to autonomously call external services, keep autonomous invocation off for this skill or review its runtime logs. If the author supplies the missing binary/credential declarations and explains auth handling, re-evaluate — that would move this toward benign.

Like a lobster shell, security has layers — review code before you run it.

latestvk97fqmjb3srezhbyf6218bastd843ey0
120downloads
0stars
1versions
Updated 3w ago
v1.0.0
MIT-0

food-travel — Eat-First Travel Planner

One-liner: Input a dish, a craving, or a city — get a complete travel plan built around eating.

This skill solves the full "eat → where → go → stay → route" chain for food lovers.

Scenario Detection

Identify which scenario the user wants, then follow the corresponding workflow:

Trigger patternScenarioExample
A dish/cuisine + no cityA: Pick a destination"我想吃烤鸭" "想吃海鲜去哪"
A city + food intentB: City food map"成都有什么好吃的" "杭州美食攻略"
A city + duration + food intentC: Full itinerary"3天吃遍西安" "周末广州美食游"

If unclear, ask the user to clarify.


Scenario A: Pick a Destination for Food

Input: a dish, cuisine, or flavor preference Output: best city recommendation + food list + travel logistics

Steps

  1. Web search: "{dish/cuisine} 最正宗 去哪个城市吃" to identify the top 2-3 cities.
  2. For each city, web search: "{city} 必吃 {dish} 餐厅推荐" to get restaurant data.
  3. Search flights (if user provides origin):
    flyai search-flight --origin "{origin}" --destination "{city}" --dep-date {date}
    
  4. Search hotels:
    flyai search-hotel --dest-name "{city}" --check-in-date {date} --check-out-date {date}
    

Output format

# 为了{dish},去{city}!

## 为什么选{city}
(One-paragraph reason)

## 必吃清单

| 餐厅 | 招牌菜 | 人均 | 地址 | 推荐理由 |
|------|--------|------|------|----------|
| ...  | ...    | ...  | ...  | ...      |

## 怎么去
(Flight options table with booking links)

## 住哪里
(Hotel options near food districts, with booking links)

Scenario B: City Food Map

Input: a city name Output: meal-by-meal restaurant map organized by time of day

Steps

  1. Web search: "{city} 必吃餐厅推荐" + "{city} 特色小吃 推荐" + "{city} 夜宵 推荐".
  2. Organize results into 4 time slots: 早餐, 午餐, 晚餐, 夜宵/下午茶.
  3. keyword-search supplement:
    flyai keyword-search --query "{city} 美食券 餐厅"
    
    Filter for food-related items only.

Output format

# {city}美食地图

## 🌅 早餐
| 餐厅 | 推荐 | 人均 | 地址 |
|------|------|------|------|

## ☀️ 午餐
...

## 🌆 晚餐
...

## 🌙 夜宵
...

## 可预订美食产品
(Filtered keyword-search results with images and booking links)

> 餐厅数据来自网络搜索,美食券来自 fly.ai 实时结果。

Scenario C: Full Food-Driven Itinerary

Input: city + duration (e.g. "3天吃遍西安") Output: day-by-day schedule with every meal planned + attractions between meals + transport + hotel

Steps

  1. Web search: "{city} {N}天美食攻略" + "{city} 必吃餐厅推荐".
  2. Search hotels:
    flyai search-hotel --dest-name "{city}" --check-in-date {date} --check-out-date {date}
    
  3. Search flights (if origin provided):
    flyai search-flight --origin "{origin}" --destination "{city}" --dep-date {date}
    
  4. Search attractions to fill between-meal time:
    flyai search-poi --city-name "{city}"
    
  5. Organize into a day-by-day plan where every meal is the anchor.

Output format

# {N}天吃遍{city}

## Day 1
### 🌅 早餐 — {restaurant}
- 推荐:{dishes}|人均:{price}|地址:{addr}

### ☀️ 上午 — {attraction}(吃完溜达消食)
(POI info with booking link)

### 🍜 午餐 — {restaurant}
- 推荐:{dishes}|人均:{price}|地址:{addr}

### 🌆 下午 — {attraction/activity}

### 🔥 晚餐 — {restaurant}
- 推荐:{dishes}|人均:{price}|地址:{addr}

### 🌙 夜宵 — {restaurant}
- 推荐:{dishes}

## Day 2
...

## 交通
(Flight options with booking links)

## 住宿
(Hotel options with booking links, prefer hotels near Day 1 dinner area)

## 预算估算
| 项目 | 预估费用 |
|------|----------|
| 机票 | ¥xxx |
| 住宿 | ¥xxx |
| 餐饮 | ¥xxx |
| 门票 | ¥xxx |
| **合计** | **¥xxx** |

> 餐厅数据来自网络搜索,机票酒店来自 fly.ai 实时结果。

General Rules

  • Food comes first — every itinerary section starts with a meal, attractions fill the gaps.
  • Web search for restaurants — flyai has no restaurant database; always use web search for dining data.
  • flyai for logistics — use search-flight, search-hotel, search-poi, keyword-search for transport, accommodation, attractions, and bookable dining products.
  • Always include booking links — for every flight, hotel, and POI result, show [Click to book]({url}).
  • Always include images — show ![]({picUrl}) or ![]({mainPic}) when available.
  • Practical details — include price, address, opening hours when available.
  • Source attribution — "餐厅数据来自网络搜索,机票酒店来自 fly.ai 实时结果。"

Comments

Loading comments...