使用 AigoHotel MCP 工具完成酒店检索、结构化筛选和实时房型价格确认。用户提出酒店推荐、预算或星级限制、候选对比、房型价格与退改规则确认时触发。本技能优先调用 MCP 工具并返回结构化结论，同时根据客户端环境选择 cloud HTTP、uvx stdio 或本地调试模式。

This skill appears to implement hotel search via a remote/local MCP service, but there are notable inconsistencies and operational risks you should consider before installing: - Metadata mismatch: The registry lists no required environment variables or credentials, yet the documentation requires an API key (and names env vars like AIGOHOTEL_API_KEY). Confirm with the skill author which secrets are truly required and why they were omitted from metadata. - Hard-coded API key: The docs include a default/shared API key. Do not rely on or expose this key — it may be public, revoked, rate-limited, or abused. Prefer using your own API key provisioned by the service. - Running external code: The references tell you to git clone a repository and run server.py or run packages via npx/uvx. Treat that like running untrusted code: inspect the repository source, run it in an isolated environment (container/VM) and review dependencies before executing. - Endpoint domains: The docs reference multiple domains (mcp.aigohotel.com and mcp.agentichotel.cn). Verify the correct official endpoints with the provider to avoid calling a typo-squatted or malicious host. Recommended steps before use: 1) Ask the publisher to update registry metadata to declare required env vars and primary credential. 2) Obtain an official API key from the provider and never embed it in public docs. 3) Inspect the GitHub repository (or published packages) for malicious code before running locally; run in an isolated environment. 4) Prefer the documented cloud HTTP mode with your own credentials rather than blindly using the provided shared key or running unverified local servers. 5) If you need help vetting the upstream repo, have a developer/security person review it.

Type: OpenClaw Skill Name: aigohotel-mcp Version: 1.0.0 The skill bundle is a legitimate integration for the AigoHotel service using the Model Context Protocol (MCP). It provides instructions and configurations for searching hotels and retrieving real-time pricing via a remote HTTP endpoint (mcp.aigohotel.com) or local execution (uvx/npx). No evidence of malicious intent, data exfiltration, or harmful prompt injection was found; the inclusion of a default API key (mcp_03f4aa5623d344308273e55aed135257) appears to be for user convenience.