Luxury Escape

• Risk level: Low
• Analyzed: Apr 10, 2026, 5:05 AM
• Findings: 0
• Version: 3.2.0

Overview

This skill is internally consistent: it is an instruction-only wrapper that relies on a third‑party flyai CLI to produce real‑time luxury travel results; the main risks are installing a global npm package and local logging, not mismatched capabilities or hidden exfiltration.

This skill appears to do what it says: it runs a third‑party 'flyai' CLI to fetch live luxury travel options and requires no extra credentials. Before installing or running it, verify the npm package @fly-ai/flyai-cli (publisher, popularity, source repository) rather than blindly running a global npm install. Expect the skill to fail offline and to potentially write a local execution log (.flyai-execution-log.json) containing your queries and CLI responses — if you handle sensitive inputs (payment info, PII), avoid persistent logs or run the skill in a sandbox. Finally, be aware the skill will retry/force re-execution if no booking links are returned, which can cause repeated network requests.