← Back to Skills Marketplace
zxc-aqr

Star Hotel Search

by zxc-Aqr · GitHub ↗ · v2.0.0
cross-platform ⚠ suspicious
484
Downloads
0
Stars
1
Active Installs
2
Versions
Install in OpenClaw
/install star-hotel
Description
Smart hotel search, supporting filtering by location, date, star rating, and budget
Usage Guidance
This skill appears to do what it says (hotel search), but it will send structured queries to an external MCP server using a public key embedded in the skill text and expects the agent to strip any PII before sending. Before installing or using it: (1) verify the external API domain and that you trust that service (the documentation shows two different domains — ask the author to clarify); (2) test only with non-sensitive queries to confirm PII is not transmitted; (3) consider requesting a private API key from the provider (or using a skill that requires you to provide your own key) so you can revoke it if needed; (4) avoid submitting names, phone numbers, emails, ID numbers, or other personal info in queries because filtering is implemented client-side and may fail. If you need higher assurance, ask the publisher for more details about their MCP endpoint and why the key is embedded.
Capability Analysis
Type: OpenClaw Skill Name: star-hotel Version: 2.0.0 The skill bundle is classified as benign. It is a 'command-type skill' with no executable code, focusing solely on hotel search functionality. Crucially, the `SKILL.md` and `search.md` files explicitly instruct the agent to remove personal identification information (PII) from the `originQuery` parameter before transmission, and prohibit the transmission of local files or system information. The API key is declared public, and the communication endpoint (`https://mcp.aigohotel.com/mcp`) appears legitimate for the stated purpose, with no evidence of data exfiltration to unauthorized destinations or prompt injection attempts to subvert the agent's intended behavior.
Capability Assessment
Purpose & Capability
The skill is an instruction-only hotel search that calls an external MCP hotel API; the declared capability (search, details, tags) matches the tools and parameters described in the SKILL.md.
Instruction Scope
The SKILL.md tells the agent to remove PII before calling the external MCP endpoint and explicitly says the agent/runtime must perform filtering. That places critical data-protection responsibility on the agent rather than enforcing it in the tool. The skill will send user search parameters to an external server (mcp.aigohotel.com) — if the agent fails to filter PII correctly, sensitive data could be transmitted. Also the doc references two different domains (mcp.agentichotel.cn for application vs mcp.aigohotel.com for the API), which is an inconsistency worth verifying.
Install Mechanism
No install spec and no code files (instruction-only). This minimizes local disk impact and the usual install-related risks.
Credentials
The skill declares no required env vars or private credentials, which is coherent. However, it embeds a public API key directly in SKILL.md (mcp_a84000de01e04920b3690d173630f163) and an Authorization header for an external endpoint. Even if the key is described as 'public', embedding keys in skill text means any agent run will include that key when contacting the remote service — consider whether you trust that service and its rate limits/quota sharing model.
Persistence & Privilege
The skill does not request always:true or other elevated persistence, and it doesn't modify other skills. However, the normal autonomous-invocation capability combined with the skill's reliance on agent-side PII filtering increases the blast radius if the agent misapplies filters.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install star-hotel
  3. After installation, invoke the skill by name or use /star-hotel
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v2.0.0
- Changed documentation language from Chinese to English for wider accessibility. - Updated tool and endpoint names to align with new Star Hotel MCP conventions. - Revised API key source mention (Star Hotel instead of AIGoHotel) and application instructions. - Clarified and formalized data transmission and privacy policy language. - Provided updated usage examples in English. - Updated documentation to reflect latest tool configurations as of 2026-02-11.
v1.0.0
Star Hotel Search v1.0.1 - Updated SKILL.md with detailed descriptions, data policy, and API Key declaration. - Clarified public API Key usage and its limitations. - Documented allowed and prohibited data transmission for user privacy. - Added examples for hotel search, pricing, and tag filtering. - Listed available MCP backend tools and configuration for easy integration.
Metadata
Slug star-hotel
Version 2.0.0
License
All-time Installs 1
Active Installs 1
Total Versions 2
Frequently Asked Questions

What is Star Hotel Search?

Smart hotel search, supporting filtering by location, date, star rating, and budget. It is an AI Agent Skill for Claude Code / OpenClaw, with 484 downloads so far.

How do I install Star Hotel Search?

Run "/install star-hotel" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Star Hotel Search free?

Yes, Star Hotel Search is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Star Hotel Search support?

Star Hotel Search is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Star Hotel Search?

It is built and maintained by zxc-Aqr (@zxc-aqr); the current version is v2.0.0.

💬 Comments