航班搜索

Search one-way flight lists from the Variflight ticket API by departure IATA city code, arrival IATA city code, and departure date.

Security Scan

The skill's code and instructions match its stated purpose (querying Variflight's public ticket API); it requires only python3 and does not request unrelated credentials or perform unexpected actions.

Purpose & Capability

Name/description describe querying Variflight for one-way flights and the included script contacts https://ticket.variflight.com/ticket-api-gateway/open/search/flightListAI. The only declared runtime requirement is python3, which is appropriate for the packaged Python script.

Instruction Scope

SKILL.md instructs collecting dep/arr/date, validating them, and running the bundled script. The script only performs an HTTP GET to the documented API, parses JSON, and prints summaries; it does not read other local files, environment variables, or send data to third-party endpoints beyond the Variflight API.

Install Mechanism

There is no install spec (instruction-only skill with a bundled script). Nothing is downloaded or written at install time.

Credentials

The skill requires no environment variables, no credentials, and no config paths. The script uses only the network to call the public API, which is proportional to the stated function.

Persistence & Privilege

always is false and the skill does not request elevated or persistent platform-wide privileges. It does not modify other skills or system configuration.

Assessment

This skill appears internally consistent and only queries Variflight's public API using the bundled Python script. Before installing, consider: (1) you will be allowing the agent to make outbound requests to ticket.variflight.com (no credentials are requested), so ensure you trust that endpoint and are comfortable with network activity; (2) if you run this in an environment with sensitive network policies, consider sandboxing the skill or running the script locally to inspect its output; (3) the script uses a fixed flightNum=10 and a custom user-agent—if you depend on rate limits or privacy, review Variflight's terms and rate limits; (4) although no credentials are requested, validate the source (homepage and registry owner) if provenance matters. If you want, I can walk through the code line-by-line or suggest changes (logging, timeouts, or stricter input handling).

Flight Search

Overview

Use the bundled script to query the Variflight ticket API and return one-way flight options for a single route and date.

Workflow

1. Collect dep, arr, and date.
2. Validate dep and arr as three-letter IATA city codes and date as YYYY-MM-DD.
3. If the user gives city names instead of codes, infer only when the mapping is unambiguous; otherwise ask for the IATA codes.
4. Run python3 scripts/query_flights.py --dep BJS --arr SHA --date 2026-04-21.
5. Summarize the result with departure airport, arrival airport, times, duration, price, transfer info, and the flight tag text.

Output Rules

• Treat API code != 0 as a failure and surface the returned msg.
• Treat an empty data.list as a valid "no flights found" result.
• Use --limit N when the user only wants a subset of results.
• Use --json only when the user asks for raw payload data.
• Mention transfer flights separately from direct flights when summarizing.
• Do not ask the user to provide an API key for this skill.

Script

• scripts/query_flights.py accepts:
  • --dep
  • --arr
  • --date
  • --limit
  • --json
• The script sends the fixed request parameter flightNum=10.

Example

Run python3 scripts/query_flights.py --dep BJS --arr SHA --date 2026-04-21 --limit 5 to fetch the first five displayed results for Beijing to Shanghai on April 21, 2026.