flyai-destination-pk 安全扫描报告 — 可信 | ClawSafe

0 /100

flyai-destination-pk

目的地PK对比助手，帮助用户在2-3个纠结的目的地之间快速做出选择

This is a legitimate travel destination comparison skill with no executable code, only documentation. All bash operations are documented CLI invocations for the @fly-ai/flyai-cli package.

技能名称flyai-destination-pk

分析耗时24.9s

引擎pi

✓

可以安装

No action needed. This skill is safe to use.

资源类型	声明权限	推断权限	状态	证据
文件系统	`READ`	`READ`	✓ 一致	SKILL.md: reads ~/.flyai/user-profile.md for user preferences
命令执行	`WRITE`	`WRITE`	✓ 一致	SKILL.md: documents npm install -g @fly-ai/flyai-cli and flyai CLI commands
网络访问	`NONE`	`NONE`	—	No network calls; relies on local CLI which handles its own API calls
环境变量	`NONE`	`NONE`	—	No environment variable access
技能调用	`NONE`	`NONE`	—	No cross-skill invocation
剪贴板	`NONE`	`NONE`	—	No clipboard access
浏览器	`NONE`	`NONE`	—	No browser automation
数据库	`NONE`	`NONE`	—	No database access

4 项发现

🔗

中危外部 URL 外部 URL

https://nodejs.org/

reference/core-workflow.md:19

🔗

中危外部 URL 外部 URL

https://registry.npmmirror.com

reference/core-workflow.md:21

🔗

中危外部 URL 外部 URL

https://img.alicdn.com/...

reference/search-hotel.md:44

🔗

中危外部 URL 外部 URL

https://img.alicdn.com/tfscom/...

reference/search-poi.md:32

目录结构

13 文件 · 31.8 KB · 1025 行

Markdown 13f · 1025L

├─ ▾ 📁 reference

│ ├─ 📝 ai-search.md Markdown 26L · 659 B

│ ├─ 📝 core-workflow.md Markdown 211L · 6.5 KB

│ ├─ 📝 examples.md Markdown 36L · 1.6 KB

│ ├─ 📝 keyword-search.md Markdown 53L · 1.6 KB

│ ├─ 📝 search-flight.md Markdown 87L · 3.0 KB

│ ├─ 📝 search-hotel.md Markdown 57L · 1.8 KB

│ ├─ 📝 search-marriott-hotel.md Markdown 54L · 1.8 KB

│ ├─ 📝 search-marriott-package.md Markdown 40L · 995 B

│ ├─ 📝 search-poi.md Markdown 47L · 2.2 KB

│ ├─ 📝 search-train.md Markdown 77L · 2.6 KB

│ ├─ 📝 tools.md Markdown 34L · 782 B

│ └─ 📝 user-profile-storage.md Markdown 187L · 4.1 KB

└─ 📝 SKILL.md Markdown 116L · 4.3 KB

安全亮点

✓ No executable code - only markdown documentation files

✓ All shell commands are explicitly documented CLI invocations for the @fly-ai/flyai-cli package

✓ npm install uses official npm registry with a versioned package reference

✓ File system access is limited to user's own profile at ~/.flyai/user-profile.md

✓ No credential harvesting, data exfiltration, or obfuscation observed

✓ No base64, eval, or dynamic code execution patterns

✓ No suspicious network patterns or IP addresses