← Back to Skills Marketplace

Travel Concierge CLI

Name: Travel Concierge CLI
Author: arein

by arein · GitHub ↗ · v1.5.0

cross-platform ⚠ suspicious

1486

Downloads

Stars

Active Installs

Versions

Install in OpenClaw

/install concierge

Description

Find accommodation contact details and run AI-assisted booking calls

README (SKILL.md)

Travel Concierge

Find contact details (phone, email, WhatsApp, Instagram, etc.) for accommodation listings and place AI booking calls.

Capabilities

1) Find contact details from a listing URL

concierge find-contact "\x3Curl>"

2) Place an autonomous phone call

concierge call "+1-555-123-4567" \
  --goal "Book a room for March 12-14" \
  --name "Derek Rein" \
  --email "[email protected]" \
  --customer-phone "+1-555-000-1111" \
  --context "Prefer direct booking if rate beats Booking.com"

The call command now auto-manages infra by default: if local server is down, it starts ngrok + call server automatically and stops both when the call ends.

Supported listing platforms

Airbnb: airbnb.com/rooms/...
Booking.com: booking.com/hotel/...
VRBO: vrbo.com/...
Expedia: expedia.com/...Hotel...

Examples

Find contacts for an Airbnb listing

Run:

concierge find-contact "https://www.airbnb.com/rooms/12345"

Start a call and control turns manually

Run:

concierge call "+1-555-123-4567" \
  --goal "Negotiate a direct booking rate" \
  --name "Derek Rein" \
  --email "[email protected]" \
  --customer-phone "+1-555-000-1111" \
  --interactive

JSON output for scripting (contact lookup)

concierge find-contact --json "https://..."

Verbose output

concierge --verbose find-contact "https://..."

Configuration

The CLI stores configuration in:

~/.config/concierge/config.json5

Optional for contact lookup

concierge config set googlePlacesApiKey "your-key"

Required for AI phone calls

concierge config set twilioAccountSid "\x3Csid>"
concierge config set twilioAuthToken "\x3Ctoken>"
concierge config set twilioPhoneNumber "+14155551234"
concierge config set deepgramApiKey "\x3Ckey>"
concierge config set elevenLabsApiKey "\x3Ckey>"
concierge config set elevenLabsVoiceId "EXAVITQu4vr4xnSDxMaL"
concierge config set anthropicApiKey "\x3Ckey>"

# Optional for auto ngrok auth
concierge config set ngrokAuthToken "\x3Ctoken>"

Check values:

concierge config show

Notes

Contact extraction uses publicly available information.
call validates local dependencies before dialing (ffmpeg with MP3 decode support, and ngrok when auto-infra is needed).
call runs preflight checks for Twilio, Deepgram, and ElevenLabs quota before dialing.
When auto infra is used, server/ngrok logs are written under ~/.config/concierge/call-runs/\x3Crun-id>/.

Usage Guidance

This skill appears to do what it says (AI-driven phone calls) but you should be cautious: the SKILL.md and CALL-SETUP.md require multiple sensitive API keys (Twilio, Deepgram, ElevenLabs, Anthropic, optional ngrok token) even though the registry metadata lists none — that's an inconsistency. Before installing or using it, do the following: 1) Verify the skill's source/author (the package has no homepage and an unknown source); 2) Inspect the actual implementation code (there's minimal code included here but confirm there's no hidden network exfiltration logic); 3) Use limited/throwaway API keys or accounts with minimal privileges and billing limits for testing; 4) Be aware ngrok will expose a local server to the public internet — avoid using your primary machine or sensitive networks, and don't expose services beyond what's necessary; 5) Expect logs and transcripts to be stored under ~/.config/concierge — treat those as sensitive data and clean them up if needed; 6) Monitor billing on Twilio/ElevenLabs/Deepgram/Anthropic because real calls incur costs. If the author can update the package metadata to declare required credentials and provide a verifiable source (or you can review the code), this would reduce the suspicion.

Capability Analysis

Type: OpenClaw Skill Name: concierge Version: 1.5.0 This skill is classified as suspicious due to its significant high-risk capabilities, even though they appear to be aligned with its stated purpose. Key indicators include the automatic startup of `ngrok` to expose a local service to the internet, the storage and use of multiple sensitive API keys (Twilio, Deepgram, ElevenLabs, Anthropic, Google Places, ngrok), and the execution of local binaries (`ffmpeg`, `ngrok`, `concierge server`). These capabilities, detailed across `SKILL.md`, `CALL-SETUP.md`, and `README.md`, present a substantial attack surface and potential for misuse, despite the lack of clear evidence of intentional malicious behavior in the provided files.

Capability Assessment

⚠ Purpose & Capability

The skill's stated purpose (finding contacts and placing AI phone calls) does justify Twilio/Deepgram/ElevenLabs/Anthropic/ngrok credentials. However, the registry metadata claims no required env vars/credentials while the SKILL.md and CALL-SETUP.md clearly require many sensitive keys — this mismatch is an incoherence that should be resolved before trusting the package.

⚠ Instruction Scope

Runtime instructions include starting a local Node call server, auto-starting ngrok to expose it publicly, handling Twilio media streams, and writing per-run logs (including transcripts) under ~/.config/concierge/call-runs/. Those actions are functionally necessary for the described feature but broaden the operational scope (network exposure and persistent storage of potentially sensitive audio/transcripts).

✓ Install Mechanism

No install spec or remote download is included (instruction-only), which reduces supply-chain risk. There is a small code footprint (vitest config) and no installers that fetch arbitrary archives.

⚠ Credentials

The number and sensitivity of required credentials (Twilio SID/AuthToken, Twilio phone number, Deepgram key, ElevenLabs key and voice ID, Anthropic key, optional ngrok token) are proportionate to the call capability, but the registry declaring 'none' is misleading. Also, the skill stores these keys in plaintext config (~/.config/concierge/config.json5) and displays masked keys only — there is no mention of encryption, which increases the risk if the machine is compromised or backups are created.

ℹ Persistence & Privilege

The skill is not always-enabled and does not request elevated platform privileges. It does, however, auto-manage long‑running processes (ngrok and a local server) when making calls and writes logs to the user's config directory; auto-exposing a local service via ngrok is powerful and should be used with care but is coherent with the feature set.

How to Use

Make sure OpenClaw is installed (local or Docker)
Run the install command in chat: /install concierge
After installation, invoke the skill by name or use /concierge
Provide required inputs per the skill's parameter spec and get structured output

Version History

v1.5.0

Version 1.5.0

Metadata

Slug concierge

Version 1.5.0

License —

All-time Installs 2

Active Installs 1

Total Versions 1

Frequently Asked Questions

What is Travel Concierge CLI?

Find accommodation contact details and run AI-assisted booking calls. It is an AI Agent Skill for Claude Code / OpenClaw, with 1486 downloads so far.

How do I install Travel Concierge CLI?

Run "/install concierge" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Travel Concierge CLI free?

Yes, Travel Concierge CLI is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Travel Concierge CLI support?

Travel Concierge CLI is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Travel Concierge CLI?

It is built and maintained by arein (@arein); the current version is v1.5.0.

More Skills