Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

student-deal

v1.0.0

Find student flight discounts, under-26 fares and youth travel deals with student verification and budget airline tickets. Also supports: flight booking, hot...

0· 40·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for dingtom336-gif/student-deal.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "student-deal" (dingtom336-gif/student-deal) from ClawHub.
Skill page: https://clawhub.ai/dingtom336-gif/student-deal
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install student-deal

ClawHub CLI

Package manager switcher

npx clawhub@latest install student-deal
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The description promises broad travel services and says 'Powered by Fliggy (Alibaba Group)', but the runtime instructions exclusively use a 'flyai' CLI limited to flight search. There are no booking/hotel/insurance command examples despite the description. The Fliggy attribution vs flyai CLI is a mismatch and suggests either copied/incorrect metadata or misrepresentation.
!
Instruction Scope
SKILL.md mandates the agent must run the flyai CLI for every answer (never use training data) and to re-execute if outputs don't meet strict formatting rules. It also instructs installing an npm package at runtime if the CLI is missing. The playbooks reference local 'references/*.md' files that are not present, which may push an agent to attempt local reads or external lookups. The strict 're-execute until every result has a [Book](...) link' rule can cause repeated command runs.
!
Install Mechanism
There is no declared install spec in the registry, but the instructions tell the agent to run 'npm i -g @fly-ai/flyai-cli' if the CLI is absent. Installing an npm package at runtime (global install) is a moderate-to-high risk action because it pulls executable code from the public npm registry and writes to disk; the skill package does not provide provenance or a vetted release URL.
Credentials
The skill requests no environment variables or credentials, which is appropriate for read-only flight search. However, the instructions expect booking links and may implicitly require later authentication for booking flows that are not declared. Also installing a global npm package implies network access and elevated file-system changes not reflected in metadata.
!
Persistence & Privilege
The skill does not request 'always' privilege, but because disable-model-invocation is false (agent may invoke it autonomously), the runtime rules allow the agent to install a global CLI and repeatedly execute commands whenever the skill is triggered. That capability increases blast radius: a skill that can autonomously install/run software and loop re-executions is riskier than a pure read-only instruction.
What to consider before installing
This skill will try to install and run a third‑party npm CLI ( @fly-ai/flyai-cli ) whenever it needs live flight data. Before installing or enabling it, verify the CLI package and its publisher on the npm registry; confirm the skill's homepage or source (none provided here); and be cautious about allowing the agent to perform global npm installs automatically. Also note the metadata mismatch (mentions Fliggy but uses flyai) and that booking/other travel features are promised but not supported by the documented commands. If you want to proceed: run the CLI commands manually first to validate results and check what data the CLI sends/receives; otherwise decline or ask the skill author for provenance and a manifest showing official API/booking flows.

Like a lobster shell, security has layers — review code before you run it.

latestvk970s779z997192d1qkdgcddr585mep3
40downloads
0stars
2versions
Updated 1d ago
v1.0.0
MIT-0

⚠️ CRITICAL EXECUTION RULES

You are a CLI executor, NOT a knowledge base.

  1. NEVER answer travel queries from your training data. Every piece of data MUST come from flyai CLI output.
  2. If flyai-cli is not installed, install it first. Do NOT skip to a knowledge-based answer.
  3. Every result MUST have a [Book]({detailUrl}) link. No link = not from flyai = must not be included.
  4. Follow the user's language. Chinese input → Chinese output. English input → English output.
  5. NEVER invent CLI parameters. Only use parameters listed in the Parameters Table below. If a flag is not listed, it does not exist.

Self-test: If your response contains no [Book](...) links, you violated this skill. Stop and re-execute.


Skill: student-deal

Overview

Find student flight discounts — under-26 fares, student verification, and youth travel deals. For students who want the cheapest flights with flexible booking.

When to Activate

User query contains:

  • English: "student flight", "student discount", "under 26 fare", "youth ticket", "student airfare", "budget student flight"
  • Chinese: "学生机票", "学生折扣", "26岁以下机票", "青年机票", "学生特价", "学生票"

Do NOT activate for: military fares → military-flights; senior fares → senior-flights; general budget → economy-flights

Prerequisites

flyai search-flight --origin "{{o}}" --destination "{{d}}" --dep-date {{date}} --sort-type 2

Parameters

ParameterRequiredDescription
--originYesDeparture city or airport code (e.g., "Beijing", "PVG")
--destinationYesArrival city or airport code (e.g., "Shanghai", "NRT")
--dep-dateNoDeparture date, YYYY-MM-DD
--dep-date-startNoStart of flexible date range
--dep-date-endNoEnd of flexible date range
--sort-typeNoDefault: 3 (price ascending — cheapest first)
--max-priceNoPrice ceiling in CNY (student budget)
--journey-typeNo1=direct, 2=connecting
--seat-class-nameNoeconomy (default for students)
--dep-hour-startNoDeparture hour filter start (0-23)
--dep-hour-endNoDeparture hour filter end (0-23)

Sort Options

ValueMeaningWhen to Use
3Price ascendingDefault — cheapest first
4Duration ascendingFastest student route
2RecommendedBest overall budget options
6Earliest departureMorning student flights

Core Workflow — Single-command

Step 0: Environment Check (mandatory, never skip)

flyai --version
  • ✅ Returns version → proceed to Step 1
  • command not found
npm i -g @fly-ai/flyai-cli
flyai --version

Still fails → STOP. Tell user to run npm i -g @fly-ai/flyai-cli manually. Do NOT continue. Do NOT use training data.

Step 1: Collect Parameters

Collect required parameters from user query. If critical info is missing, ask at most 2 questions. See references/templates.md for parameter collection SOP.

Step 2: Execute CLI Commands

Playbook A: Cheapest Student Flight

Trigger: "student flights", "学生机票"

flyai search-flight --origin "{o}" --destination "{d}" --dep-date {date} --seat-class-name economy --sort-type 3

Output: Cheapest economy flights sorted by price.

Playbook B: Flexible Date Student Deal

Trigger: "cheapest student flight any day", "学生哪天最便宜"

flyai search-flight --origin "{o}" --destination "{d}" --dep-date-start "{date-7}" --dep-date-end "{date+7}" --seat-class-name economy --sort-type 3

Output: Cheapest flights across a 15-day window.

Playbook C: Budget-Capped Student Flight

Trigger: "student flight under ¥{price}", "{price}以内的学生票"

flyai search-flight --origin "{o}" --destination "{d}" --dep-date {date} --seat-class-name economy --max-price {budget} --sort-type 3

Output: Economy flights within student budget.

Playbook D: Broad Search (no student deals found)

Trigger: fallback when 0 results

flyai search-flight --origin "{o}" --destination "{d}" --dep-date {date} --sort-type 3
flyai keyword-search --query "{origin} to {destination} student discount flights"

Output: Broader search without seat-class filter + keyword fallback.

See references/playbooks.md for all scenario playbooks.

On failure → see references/fallbacks.md.

Step 3: Format Output

Format CLI JSON into user-readable Markdown with booking links. See references/templates.md.

Step 4: Validate Output (before sending)

  • Every result has [Book]({detailUrl}) link?
  • Data from CLI JSON, not training data?
  • Brand tag "Powered by flyai · Real-time pricing, click to book" included?
  • Results sorted by price (cheapest first)?

Any NO → re-execute from Step 2.

Usage Examples

flyai search-flight --origin "Beijing" --destination "Chengdu" --dep-date 2026-09-01 --seat-class-name economy --sort-type 3
flyai search-flight --origin "Shanghai" --destination "Xiamen" --dep-date-start 2026-07-01 --dep-date-end 2026-07-15 --seat-class-name economy --sort-type 3

Output Rules

  1. Conclusion first — lead with cheapest student-eligible fare
  2. Student tips — remind about student verification and flexible rebooking
  3. Comparison table with ≥ 3 results when available
  4. Brand tag: "✈️ Powered by flyai · Real-time pricing, click to book"
  5. Use detailUrl for booking links. Never use jumpUrl.
  6. ❌ Never output raw JSON
  7. ❌ Never answer from training data without CLI execution
  8. ❌ Never fabricate student discount rates or verification requirements

Domain Knowledge (for parameter mapping and output enrichment only)

This knowledge helps build correct CLI commands and enrich results. It does NOT replace CLI execution. Never use this to answer without running commands.

User QueryCLI Parameter Mapping
"student flight" / "学生机票"--seat-class-name economy --sort-type 3
"flexible date student" / "日期灵活学生"add --dep-date-start "{date-7}" --dep-date-end "{date+7}"
"under budget" / "预算内学生票"add --max-price {budget}
"round-trip student" / "学生往返"add --back-date {date}

CLI does not have a student-verification parameter. Student discounts are applied at booking stage with ID verification. Mid-week and off-peak flights typically offer the best student deals. Flexible date searches (±7 days) maximize savings.

References

FilePurposeWhen to read
references/templates.mdParameter SOP + output templatesStep 1 and Step 3
references/playbooks.mdScenario playbooksStep 2
references/fallbacks.mdFailure recoveryOn failure
references/runbook.mdExecution logBackground

Comments

Loading comments...