flyai-travel-chat 安全扫描报告 — 可信 | ClawSafe

0 /100

flyai-travel-chat

智能旅行规划助手，支持周末出游、家庭旅行、蜜月规划等场景，能记住用户偏好并提供个性化推荐

This is a pure Markdown documentation-only skill for a travel planning assistant with no executable code, scripts, or binary files. All described capabilities are limited to text-based search, user preference storage, and web fetching—no dangerous operations detected.

技能名称flyai-travel-chat

分析耗时31.0s

引擎pi

✓

可以安装

No action needed. This skill is safe to use as described.

资源类型	声明权限	推断权限	状态	证据
文件系统	`READ`	`READ`	✓ 一致	SKILL.md declares read access to ~/.flyai/user-profile.md for user profile stora…
网络访问	`READ`	`READ`	✓ 一致	SKILL.md declares fetch_content for web access; flyai CLI commands make outbound…
命令执行	`NONE`	`NONE`	—	No shell commands executed by this skill—flyai CLI is invoked by the host platfo…
环境变量	`NONE`	`NONE`	—	No environment variable access described
技能调用	`NONE`	`NONE`	—	No cross-skill invocation capability described
剪贴板	`NONE`	`NONE`	—	No clipboard access described
浏览器	`NONE`	`NONE`	—	No browser automation described
数据库	`NONE`	`NONE`	—	No database access described

3 项发现

🔗

中危外部 URL 外部 URL

https://nodejs.org/

reference/core-workflow.md:22

🔗

中危外部 URL 外部 URL

https://img.alicdn.com/...

reference/search-hotel.md:44

🔗

中危外部 URL 外部 URL

https://img.alicdn.com/tfscom/...

reference/search-poi.md:32

目录结构

18 文件 · 79.5 KB · 2564 行

Markdown 18f · 2564L

├─ ▾ 📁 reference

│ ├─ 📝 ai-search.md Markdown 26L · 659 B

│ ├─ 📝 core-workflow.md Markdown 162L · 4.5 KB

│ ├─ 📝 examples.md Markdown 183L · 5.6 KB

│ ├─ 📝 exploration-framework.md Markdown 77L · 2.5 KB

│ ├─ 📝 flyai-commands.md Markdown 146L · 3.8 KB

│ ├─ 📝 keyword-search.md Markdown 53L · 1.6 KB

│ ├─ 📝 memory-system.md Markdown 126L · 3.5 KB

│ ├─ 📝 personas.md Markdown 61L · 2.5 KB

│ ├─ 📝 scenarios.md Markdown 869L · 28.1 KB

│ ├─ 📝 search-flight.md Markdown 86L · 3.0 KB

│ ├─ 📝 search-hotel.md Markdown 56L · 1.8 KB

│ ├─ 📝 search-marriott-hotel.md Markdown 54L · 1.8 KB

│ ├─ 📝 search-marriott-package.md Markdown 40L · 995 B

│ ├─ 📝 search-poi.md Markdown 46L · 2.2 KB

│ ├─ 📝 search-train.md Markdown 76L · 2.6 KB

│ ├─ 📝 tools.md Markdown 83L · 2.0 KB

│ └─ 📝 user-profile-storage.md Markdown 187L · 4.1 KB

└─ 📝 SKILL.md Markdown 233L · 8.7 KB

安全亮点

✓ Pure Markdown documentation package—no executable code, scripts, or binaries present

✓ All capabilities (user profile storage, search, web fetch) are declared in SKILL.md and match implementation

✓ No credential harvesting, sensitive path access (besides the benign ~/.flyai/user-profile.md), or environment variable enumeration

✓ No obfuscation, base64-encoded payloads, or reverse shell behavior

✓ No external data exfiltration channels detected

✓ No supply chain risk—all 18 files are Markdown with no dependencies

✓ NODE_TLS_REJECT_UNAUTHORIZED=0 usage is a well-known FlyAI CLI environment configuration issue, not malicious

✓ User profile storage to ~/.flyai/ is scoped to the skill's own data directory, not a credential or secret path