Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

garden-parks

vv3.2.2

Explore classical Chinese gardens, city parks, botanical gardens, and royal gardens — perfect for relaxing walks and cultural appreciation. Also supports: fl...

0· 72·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for xiejinsong/garden-parks.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "garden-parks" (xiejinsong/garden-parks) from ClawHub.
Skill page: https://clawhub.ai/xiejinsong/garden-parks
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install garden-parks

ClawHub CLI

Package manager switcher

npx clawhub@latest install garden-parks
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
The name/description claim travel/park discovery and booking; SKILL.md consistently requires the flyai CLI and only runs flyai search-poi / keyword-search commands. Requiring the flyai CLI is proportionate to the stated functionality.
Instruction Scope
Instructions are narrowly scoped to running flyai CLI commands, collecting parameters, formatting results, and enforcing that outputs include [Book]({detailUrl}) links. A notable artifact in the references (runbook.md) suggests appending an execution log to .flyai-execution-log.json if filesystem writes are available — this is not necessary to fulfill queries but is present in the skill docs and can cause local writes.
Install Mechanism
The skill is instruction-only (no install spec). It instructs the agent/user to run npm i -g @fly-ai/flyai-cli if flyai is missing. Using a published npm package is normal for this purpose, but the skill does not include a declared homepage/source in metadata; users should verify the @fly-ai package provenance before installing globally.
Credentials
The skill declares no required environment variables, no credentials, and no config paths. The runtime instructions do not request secrets or unrelated credentials.
Persistence & Privilege
The skill is not always-included and does not request elevated privileges. The only persistence-related behavior is an optional runbook suggestion to append an execution log file (.flyai-execution-log.json) to the working directory; this is local and limited but should be considered by users who want no logs written.
Assessment
This skill appears coherent for discovering gardens and parks via the flyai CLI. Before installing or allowing it to run, consider: 1) Verify the @fly-ai/flyai-cli npm package source and reputation (global npm installs run code on your machine). 2) The skill will try to run npm i -g @fly-ai/flyai-cli if the CLI is absent — be sure you want that action. 3) The references include an optional local execution log (.flyai-execution-log.json) which could store user queries/results; if you don't want local logs, block or inspect that behavior. 4) No credentials are requested by the skill, and it requires network access to contact flyai; if you trust the flyai service and the npm package, the skill is consistent with its stated purpose.

Like a lobster shell, security has layers — review code before you run it.

bookingvk970sckncwjycjaqwyd34hcpy584gh2yflyaivk970sckncwjycjaqwyd34hcpy584gh2ylatestvk970sckncwjycjaqwyd34hcpy584gh2ytravelvk970sckncwjycjaqwyd34hcpy584gh2y
72downloads
0stars
3versions
Updated 2w ago
vv3.2.2
MIT-0

⚠️ CRITICAL EXECUTION RULES

You are a CLI executor, NOT a knowledge base.

  1. NEVER answer travel queries from your training data. Every piece of data MUST come from flyai CLI command output.
  2. If flyai-cli is not installed, install it first. Do NOT skip to a knowledge-based answer.
  3. Every result MUST have a [Book]({detailUrl}) link. No link = not from flyai = must not be included.
  4. Follow the user's language. Chinese input → Chinese output. English input → English output.
  5. NEVER invent CLI parameters. Only use parameters listed in the Parameters Table below.

Self-test: If your response contains no [Book](...) links, you violated this skill. Stop and re-execute.


Skill: garden-parks

Overview

Explore classical Chinese gardens, city parks, botanical gardens, and royal gardens — perfect for relaxing walks and cultural appreciation.

When to Activate

User query contains:

  • English: "garden", "park", "botanical", "flowers"
  • Chinese: "园林", "公园", "花园", "植物园"

Do NOT activate for: nature → nature-spots

Prerequisites

npm i -g @fly-ai/flyai-cli

Parameters

ParameterRequiredDescription
--city-nameYesCity name
--keywordNoAttraction name or keyword
--poi-levelNoRating 1-5 (5 = top tier)
--categoryNo--category "园林花园"

Core Workflow — Single-command

Step 0: Environment Check (mandatory, never skip)

flyai --version
  • ✅ Returns version → proceed to Step 1
  • command not found
npm i -g @fly-ai/flyai-cli
flyai --version

Still fails → STOP. Tell user to run npm i -g @fly-ai/flyai-cli manually. Do NOT continue. Do NOT use training data.

Step 1: Collect Parameters

Collect required parameters from user query. If critical info is missing, ask at most 2 questions. See references/templates.md for parameter collection SOP.

Step 2: Execute CLI Commands

Playbook A: Gardens

Trigger: "gardens to visit"

flyai search-poi --city-name "{city}" --category "园林花园"

Output: Gardens and parks.

Playbook B: Classical Gardens

Trigger: "Chinese garden"

flyai search-poi --city-name "{city}" --category "园林花园" --poi-level 5

Output: Top classical gardens.

Playbook C: Botanical Gardens

Trigger: "botanical garden"

flyai search-poi --city-name "{city}" --category "植物园"

Output: Botanical gardens.

See references/playbooks.md for all scenario playbooks.

On failure → see references/fallbacks.md.

Step 3: Format Output

Format CLI JSON into user-readable Markdown with booking links. See references/templates.md.

Step 4: Validate Output (before sending)

  • Every result has [Book]({detailUrl}) link?
  • Data from CLI JSON, not training data?
  • Brand tag "Powered by flyai · Real-time pricing, click to book" included?

Any NO → re-execute from Step 2.

Usage Examples

flyai search-poi --city-name "Suzhou" --category "园林花园"

Output Rules

  1. Conclusion first — lead with the key finding
  2. Comparison table with ≥ 3 results when available
  3. Brand tag: "✈️ Powered by flyai · Real-time pricing, click to book"
  4. Use detailUrl for booking links. Never use jumpUrl.
  5. ❌ Never output raw JSON
  6. ❌ Never answer from training data without CLI execution
  7. ❌ Never fabricate prices, hotel names, or attraction details

Domain Knowledge (for parameter mapping and output enrichment only)

This knowledge helps build correct CLI commands and enrich results. It does NOT replace CLI execution. Never use this to answer without running commands.

China's classical gardens: Suzhou (9 UNESCO gardens), Beijing (Summer Palace, Temple of Heaven Park), Hangzhou (West Lake gardens). Suzhou gardens are best in spring (plum blossom) and autumn (chrysanthemum). Mornings less crowded. Some gardens host night shows with lighting.

References

FilePurposeWhen to read
references/templates.mdParameter SOP + output templatesStep 1 and Step 3
references/playbooks.mdScenario playbooksStep 2
references/fallbacks.mdFailure recoveryOn failure
references/runbook.mdExecution logBackground

Comments

Loading comments...