Visa Itinerary Gen
v1.6.0一键生成领馆级签证行程计划书 — Generate consulate-grade visa itinerary from natural language. Real flyai data, zero hallucination. PDF + booking links with Fliggy.
⭐ 5· 194·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
Name/description claim to build a visa itinerary using real flyai data and produce PDF + Fliggy booking links. Declared binaries (node, python3, flyai) and the included render_pdf.py (HTML→PDF via Playwright) match that purpose. The inclusion of flyai-cli and Playwright as install targets is expected for querying Fliggy and producing PDFs.
Instruction Scope
SKILL.md prescribes running the flyai CLI to fetch flights/hotels/POIs and rendering a Markdown table to PDF. Those steps involve network calls to the flyai/Fliggy backend (expected for this skill). The instructions are strict and do not request unrelated system files, secrets, or global configuration changes. They do, however, transmit user trip parameters to a third-party service (flyai/Fliggy), which is necessary for the advertised functionality.
Install Mechanism
Install spec uses npm package @fly-ai/flyai-cli (to provide the 'flyai' binary) and Playwright for PDF rendering. Playwright installation (pip or npm variant) will download browser binaries (Chromium), which is normal but substantial. The SKILL.md requires asking the user for permission before installing dependencies rather than installing silently — good practice. The 'uv' listing for playwright is slightly non-standard but aligns with the documented pip install flow in SKILL.md.
Credentials
The skill requests no environment variables, credentials, or config paths. It operates via a CLI (flyai) and produces local PDF/HTML outputs. No disproportionate secret or cross-service credentials are requested.
Persistence & Privilege
The skill does not request always:true; autonomous invocation is allowed by default but not combined with elevated privileges or secret access. It does not attempt to modify other skills or system-wide settings.
Assessment
This skill appears coherent and implements what it promises: it uses the flyai CLI to fetch Fliggy data and Playwright to render PDFs. Before installing or running: (1) confirm you trust the flyai CLI (the project links to an external repo) since trip details are sent to that third-party service; (2) be aware Playwright will download a Chromium browser (large binary) when installed; (3) the HTML templates contain Fliggy links (a.feizhu.com) which may be redirect/affiliate links — clickable links open external pages; (4) the skill correctly asks for permission before auto-installing dependencies, so approve installations only if you trust the sources. If you want extra assurance, inspect or vet the @fly-ai/flyai-cli package source before granting install permission.Like a lobster shell, security has layers — review code before you run it.
itineraryvk971jsxnpdc1tmc18eqc78ceax83zr2qlatestvk97746xcj8rveb83857njrratx8472tntravelvk971jsxnpdc1tmc18eqc78ceax83zr2qvisavk971jsxnpdc1tmc18eqc78ceax83zr2q
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📋 Clawdis
Binsnode, python3, flyai
Install
Node
Bins: flyai
npm i -g @fly-ai/flyai-cliuv
Bins: playwright
uv tool install playwright