扫描报告
0 /100
flyai-hotel-picker
酒店N选1决策助手，帮助用户从海量酒店中精选3家进行对比决策
The skill is a legitimate hotel selection assistant that uses FlyAI CLI commands to search hotels and POIs. No malicious behavior detected - all functionality is declared in documentation.
可以安装
No action required. The skill is safe to use.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | READ | READ | ✓ 一致 | SKILL.md:164 - read_file(file_path="~/.flyai/user-profile.md") |
| 命令执行 | WRITE | WRITE | ✓ 一致 | SKILL.md:112-121 - npm install @fly-ai/flyai-cli |
| 网络访问 | READ | READ | ✓ 一致 | SKILL.md:117-119 - registry.npmmirror.com for npm install |
| 技能调用 | READ | READ | ✓ 一致 | SKILL.md:17-20 - uses search-hotel, search-poi, search-marriott-hotel |
4 项发现
中危 外部 URL 外部 URL
https://nodejs.org/ SKILL.md:117 中危 外部 URL 外部 URL
https://registry.npmmirror.com SKILL.md:119 中危 外部 URL 外部 URL
https://img.alicdn.com/... reference/search-hotel.md:44 中危 外部 URL 外部 URL
https://img.alicdn.com/tfscom/... reference/search-poi.md:32 目录结构
10 文件 · 27.5 KB · 913 行 Markdown 10f · 913L
├─
▾
reference
│ ├─
ai-search.md
Markdown
│ ├─
keyword-search.md
Markdown
│ ├─
search-flight.md
Markdown
│ ├─
search-hotel.md
Markdown
│ ├─
search-marriott-hotel.md
Markdown
│ ├─
search-marriott-package.md
Markdown
│ ├─
search-poi.md
Markdown
│ ├─
search-train.md
Markdown
│ └─
user-profile-storage.md
Markdown
└─
SKILL.md
Markdown
安全亮点
✓ All functionality is clearly declared in SKILL.md documentation
✓ No scripting files present - all content is documentation only
✓ No credential harvesting, API key access, or sensitive credential patterns found
✓ No base64 encoding, obfuscation, or anti-analysis patterns detected
✓ No reverse shell, C2 communication, or data exfiltration indicators
✓ No hidden instructions in HTML comments or documentation
✓ Skill uses legitimate FlyAI CLI tool for hotel/POI search
✓ User profile access is declared and serves the stated purpose
✓ External URLs (npm registry) are necessary for CLI tool installation