← 返回 Skills 市场
1486
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install concierge
功能描述
Find accommodation contact details and run AI-assisted booking calls
使用说明 (SKILL.md)
Travel Concierge
Find contact details (phone, email, WhatsApp, Instagram, etc.) for accommodation listings and place AI booking calls.
Capabilities
1) Find contact details from a listing URL
concierge find-contact "\x3Curl>"
2) Place an autonomous phone call
concierge call "+1-555-123-4567" \
--goal "Book a room for March 12-14" \
--name "Derek Rein" \
--email "[email protected]" \
--customer-phone "+1-555-000-1111" \
--context "Prefer direct booking if rate beats Booking.com"
The call command now auto-manages infra by default: if local server is down, it starts ngrok + call server automatically and stops both when the call ends.
Supported listing platforms
- Airbnb:
airbnb.com/rooms/... - Booking.com:
booking.com/hotel/... - VRBO:
vrbo.com/... - Expedia:
expedia.com/...Hotel...
Examples
Find contacts for an Airbnb listing
Run:
concierge find-contact "https://www.airbnb.com/rooms/12345"
Start a call and control turns manually
Run:
concierge call "+1-555-123-4567" \
--goal "Negotiate a direct booking rate" \
--name "Derek Rein" \
--email "[email protected]" \
--customer-phone "+1-555-000-1111" \
--interactive
JSON output for scripting (contact lookup)
concierge find-contact --json "https://..."
Verbose output
concierge --verbose find-contact "https://..."
Configuration
The CLI stores configuration in:
~/.config/concierge/config.json5
Optional for contact lookup
concierge config set googlePlacesApiKey "your-key"
Required for AI phone calls
concierge config set twilioAccountSid "\x3Csid>"
concierge config set twilioAuthToken "\x3Ctoken>"
concierge config set twilioPhoneNumber "+14155551234"
concierge config set deepgramApiKey "\x3Ckey>"
concierge config set elevenLabsApiKey "\x3Ckey>"
concierge config set elevenLabsVoiceId "EXAVITQu4vr4xnSDxMaL"
concierge config set anthropicApiKey "\x3Ckey>"
# Optional for auto ngrok auth
concierge config set ngrokAuthToken "\x3Ctoken>"
Check values:
concierge config show
Notes
- Contact extraction uses publicly available information.
callvalidates local dependencies before dialing (ffmpegwith MP3 decode support, andngrokwhen auto-infra is needed).callruns preflight checks for Twilio, Deepgram, and ElevenLabs quota before dialing.- When auto infra is used, server/ngrok logs are written under
~/.config/concierge/call-runs/\x3Crun-id>/.
安全使用建议
This skill appears to do what it says (AI-driven phone calls) but you should be cautious: the SKILL.md and CALL-SETUP.md require multiple sensitive API keys (Twilio, Deepgram, ElevenLabs, Anthropic, optional ngrok token) even though the registry metadata lists none — that's an inconsistency. Before installing or using it, do the following: 1) Verify the skill's source/author (the package has no homepage and an unknown source); 2) Inspect the actual implementation code (there's minimal code included here but confirm there's no hidden network exfiltration logic); 3) Use limited/throwaway API keys or accounts with minimal privileges and billing limits for testing; 4) Be aware ngrok will expose a local server to the public internet — avoid using your primary machine or sensitive networks, and don't expose services beyond what's necessary; 5) Expect logs and transcripts to be stored under ~/.config/concierge — treat those as sensitive data and clean them up if needed; 6) Monitor billing on Twilio/ElevenLabs/Deepgram/Anthropic because real calls incur costs. If the author can update the package metadata to declare required credentials and provide a verifiable source (or you can review the code), this would reduce the suspicion.
功能分析
Type: OpenClaw Skill
Name: concierge
Version: 1.5.0
This skill is classified as suspicious due to its significant high-risk capabilities, even though they appear to be aligned with its stated purpose. Key indicators include the automatic startup of `ngrok` to expose a local service to the internet, the storage and use of multiple sensitive API keys (Twilio, Deepgram, ElevenLabs, Anthropic, Google Places, ngrok), and the execution of local binaries (`ffmpeg`, `ngrok`, `concierge server`). These capabilities, detailed across `SKILL.md`, `CALL-SETUP.md`, and `README.md`, present a substantial attack surface and potential for misuse, despite the lack of clear evidence of intentional malicious behavior in the provided files.
能力评估
Purpose & Capability
The skill's stated purpose (finding contacts and placing AI phone calls) does justify Twilio/Deepgram/ElevenLabs/Anthropic/ngrok credentials. However, the registry metadata claims no required env vars/credentials while the SKILL.md and CALL-SETUP.md clearly require many sensitive keys — this mismatch is an incoherence that should be resolved before trusting the package.
Instruction Scope
Runtime instructions include starting a local Node call server, auto-starting ngrok to expose it publicly, handling Twilio media streams, and writing per-run logs (including transcripts) under ~/.config/concierge/call-runs/. Those actions are functionally necessary for the described feature but broaden the operational scope (network exposure and persistent storage of potentially sensitive audio/transcripts).
Install Mechanism
No install spec or remote download is included (instruction-only), which reduces supply-chain risk. There is a small code footprint (vitest config) and no installers that fetch arbitrary archives.
Credentials
The number and sensitivity of required credentials (Twilio SID/AuthToken, Twilio phone number, Deepgram key, ElevenLabs key and voice ID, Anthropic key, optional ngrok token) are proportionate to the call capability, but the registry declaring 'none' is misleading. Also, the skill stores these keys in plaintext config (~/.config/concierge/config.json5) and displays masked keys only — there is no mention of encryption, which increases the risk if the machine is compromised or backups are created.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. It does, however, auto-manage long‑running processes (ngrok and a local server) when making calls and writes logs to the user's config directory; auto-exposing a local service via ngrok is powerful and should be used with care but is coherent with the feature set.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install concierge - 安装完成后,直接呼叫该 Skill 的名称或使用
/concierge触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.5.0
Version 1.5.0
元数据
常见问题
Travel Concierge CLI 是什么?
Find accommodation contact details and run AI-assisted booking calls. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 1486 次。
如何安装 Travel Concierge CLI?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install concierge」即可一键安装,无需额外配置。
Travel Concierge CLI 是免费的吗?
是的,Travel Concierge CLI 完全免费(开源免费),可自由下载、安装和使用。
Travel Concierge CLI 支持哪些平台?
Travel Concierge CLI 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Travel Concierge CLI?
由 arein(@arein)开发并维护,当前版本 v1.5.0。
推荐 Skills