Scan Report
0 /100
flyai-travel-chat
智能旅行规划助手，支持周末出游、家庭旅行、蜜月规划等场景，能记住用户偏好并提供个性化推荐
This is a pure Markdown documentation-only skill for a travel planning assistant with no executable code, scripts, or binary files. All described capabilities are limited to text-based search, user preference storage, and web fetching—no dangerous operations detected.
Safe to install
No action needed. This skill is safe to use as described.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | READ | READ | ✓ Aligned | SKILL.md declares read access to ~/.flyai/user-profile.md for user profile stora… |
| Network | READ | READ | ✓ Aligned | SKILL.md declares fetch_content for web access; flyai CLI commands make outbound… |
| Shell | NONE | NONE | — | No shell commands executed by this skill—flyai CLI is invoked by the host platfo… |
| Environment | NONE | NONE | — | No environment variable access described |
| Skill Invoke | NONE | NONE | — | No cross-skill invocation capability described |
| Clipboard | NONE | NONE | — | No clipboard access described |
| Browser | NONE | NONE | — | No browser automation described |
| Database | NONE | NONE | — | No database access described |
3 findings
Medium External URL 外部 URL
https://nodejs.org/ reference/core-workflow.md:22 Medium External URL 外部 URL
https://img.alicdn.com/... reference/search-hotel.md:44 Medium External URL 外部 URL
https://img.alicdn.com/tfscom/... reference/search-poi.md:32 File Tree
18 files · 79.5 KB · 2564 lines Markdown 18f · 2564L
├─
▾
reference
│ ├─
ai-search.md
Markdown
│ ├─
core-workflow.md
Markdown
│ ├─
examples.md
Markdown
│ ├─
exploration-framework.md
Markdown
│ ├─
flyai-commands.md
Markdown
│ ├─
keyword-search.md
Markdown
│ ├─
memory-system.md
Markdown
│ ├─
personas.md
Markdown
│ ├─
scenarios.md
Markdown
│ ├─
search-flight.md
Markdown
│ ├─
search-hotel.md
Markdown
│ ├─
search-marriott-hotel.md
Markdown
│ ├─
search-marriott-package.md
Markdown
│ ├─
search-poi.md
Markdown
│ ├─
search-train.md
Markdown
│ ├─
tools.md
Markdown
│ └─
user-profile-storage.md
Markdown
└─
SKILL.md
Markdown
Security Positives
✓ Pure Markdown documentation package—no executable code, scripts, or binaries present
✓ All capabilities (user profile storage, search, web fetch) are declared in SKILL.md and match implementation
✓ No credential harvesting, sensitive path access (besides the benign ~/.flyai/user-profile.md), or environment variable enumeration
✓ No obfuscation, base64-encoded payloads, or reverse shell behavior
✓ No external data exfiltration channels detected
✓ No supply chain risk—all 18 files are Markdown with no dependencies
✓ NODE_TLS_REJECT_UNAUTHORIZED=0 usage is a well-known FlyAI CLI environment configuration issue, not malicious
✓ User profile storage to ~/.flyai/ is scoped to the skill's own data directory, not a credential or secret path