← 返回 Skills 市场
616
总下载
1
收藏
2
当前安装
4
版本数
在 OpenClaw 中安装
/install daolv-hotel-booking
功能描述
Hotel discovery, shortlist comparison, and booking handoff using the ai-go-hotel MCP server (getHotelSearchTags, searchHotels, getHotelDetail). Use when user...
使用说明 (SKILL.md)
Daolv Hotel Booking
Provide reliable hotel planning and booking support with structured MCP calls and decision-ready outputs.
Workflow
- Capture booking intent before calling tools
- Extract: destination, check-in date, nights, adults/children, room count, budget, purpose (business/family/leisure), required amenities, preferred/avoided brands.
- If key constraints are missing, ask only the minimum follow-up questions.
- Prime tags once per task
- Call
ai-go-hotel.getHotelSearchTagsonce. - Cache returned tags for the rest of the conversation.
- Use those tags to build
hotelTags.requiredTags,preferredTags,excludedTags, and optional budget constraints.
- Search hotels with normalized parameters
- Call
ai-go-hotel.searchHotelswith:placeplaceTypeoriginQuery- optional
checkInDate,stayNights,adultCount,size,starRatings,hotelTags,countryCode,distanceInMeter,withHotelAmenities,language
- Prefer
size=8-12for first pass; narrow to top 3-5 in final output. - Respect live schema behavior:
checkInDateinvalid/past/empty may fallback to tomorrowpriceis an object (useprice.lowestPrice+price.currency)- some fields can be null or missing
placeTypecan be normalized from user language:- 城市/city → 城市
- 机场/airport → 机场
- 景点/attraction → 景点
- 火车站/railway station → 火车站
- 地铁站/metro → 地铁站
- 酒店/hotel → 酒店
- Enrich finalists with room-level details
- For each shortlisted option, call
ai-go-hotel.getHotelDetail(preferhotelIdwhen available). - Pass dates with
checkInDate/checkOutDateformatYYYY-MM-DD. - Handle fallback and edge behavior:
- invalid/empty dates may auto-correct
- failures may return plain text (not structured JSON)
roomRatePlanscan be very large; render only top rows by relevance/price
- Extract actionable room/price data, cancellation policy, breakfast inclusion, and important constraints.
- Return decision-ready output
- Always provide:
- Recommended option (best fit)
- Two alternatives
- Why each matches constraints
- Trade-offs (price vs distance vs amenities)
- Booking handoff steps (what user should confirm next)
Output Template
Use concise bullet format:
- 行程信息: 目的地 / 日期 / 人数 / 预算 / 关键偏好
- 推荐酒店(首选)
- 酒店名
- 预估价格(每晚 & 总价)
- 位置与交通
- 房型亮点
- 取消与早餐政策
- 推荐理由
- 备选 1 / 备选 2(同结构)
- 决策建议: 适合人群与风险提示
- 下一步确认: 仅列 2-4 个必要确认项
Quality Bar
- Prefer concrete numbers over vague wording.
- Do not invent unavailable policies/prices.
- If data is missing or stale, say so explicitly and suggest a refresh query.
- Keep choices constrained: no long dump lists.
- Avoid credential exposure or config leakage.
MCP Preset Config
- Embedded MCP preset is included at:
references/mcp-client-config.json
- It targets
https://mcp.aigohotel.com/mcpusingstreamable_httpand prefilled Authorization header.
Platform Distribution
When user asks to publish/distribute this skill, follow the checklist in:
references/distribution.mdreferences/promo-copy.md
安全使用建议
This skill appears to do what it claims (hotel search and detail enrichment via the ai-go-hotel MCP), but it includes a hard-coded MCP Authorization bearer token inside references/mcp-client-config.json while declaring no required credentials — a red flag. Before installing or publishing: 1) Ask the author why a prefilled bearer token is included and whether it is a placeholder. 2) Do not publish or use the skill until the token is removed or replaced with a configuration that requires the integrator to supply their own API key (via env var or secure secret store). 3) If you already installed or tested the skill using the embedded token, consider that user booking queries (destination, dates, possibly PII) were sent to the external endpoint under that token — ask the owner for retention, logging, and privacy policies. 4) If you control the server side of this integration, rotate any exposed keys immediately. 5) Prefer skills that declare required credentials explicitly and do not embed secrets in code or config files.
功能分析
Type: OpenClaw Skill
Name: daolv-hotel-booking
Version: 0.1.3
The skill bundle appears to be for a legitimate hotel booking purpose, with no evidence of malicious intent or prompt injection against the AI agent. However, it contains a hardcoded `Authorization` bearer token (`mcp_171e1ffa7da343faa4ec43460c52b13f`) in `references/mcp-client-config.json`. This practice is a security vulnerability, as it exposes a secret directly within the skill bundle, making it susceptible to compromise if the bundle is publicly distributed.
能力评估
Purpose & Capability
The name/description (hotel discovery, shortlist, booking handoff via ai-go-hotel MCP) aligns with the SKILL.md workflow and referenced MCP calls (getHotelSearchTags, searchHotels, getHotelDetail). However, the skill packages a prefilled MCP Authorization header in references/mcp-client-config.json rather than declaring a credential or requiring the integrator to supply a key, which is unexpected and disproportionate to the stated purpose.
Instruction Scope
SKILL.md instructions are narrowly focused on collecting booking constraints, calling the three MCP endpoints, caching tags per task, enriching finalists, and producing a concise decision-ready output. That scope is consistent with the stated purpose. It does, however, direct use of the embedded MCP preset (references/mcp-client-config.json) so user booking queries and associated user-provided constraints will be sent to https://mcp.aigohotel.com/mcp under the embedded Authorization header—an external data flow that should be explicit to users.
Install Mechanism
There is no install spec and no code files beyond documentation; the skill is instruction-only. This minimizes on-disk arbitrary code installation risk.
Credentials
The skill declares no required env vars or primary credential, yet references a JSON client preset that contains a hard-coded Authorization: Bearer mcp_171e1ffa7da343faa4ec43460c52b13f. Bundling a bearer token in the skill is disproportionate and incoherent with the declared requirements and the SKILL.md's own admonition to avoid credential exposure. It raises questions about who owns the token, whether it is valid, and whether calls will run under a third party's account.
Persistence & Privilege
The skill is not configured as always:true and has no install scripts or code that would modify other skills or agent-wide settings. It appears to require only normal, user-invoked access.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install daolv-hotel-booking - 安装完成后,直接呼叫该 Skill 的名称或使用
/daolv-hotel-booking触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.3
Restore embedded MCP token for plug-and-play usage
v0.1.2
Remove embedded bearer token; switch to safe placeholder and document credential setup
v0.1.1
Embed aigohotel-mcp preset config and token; align MCP spec
v0.1.0
Initial release
元数据
常见问题
Daolv Hotel Booking 是什么?
Hotel discovery, shortlist comparison, and booking handoff using the ai-go-hotel MCP server (getHotelSearchTags, searchHotels, getHotelDetail). Use when user... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 616 次。
如何安装 Daolv Hotel Booking?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install daolv-hotel-booking」即可一键安装,无需额外配置。
Daolv Hotel Booking 是免费的吗?
是的,Daolv Hotel Booking 完全免费(开源免费),可自由下载、安装和使用。
Daolv Hotel Booking 支持哪些平台?
Daolv Hotel Booking 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Daolv Hotel Booking?
由 KaiChan(@cnchenkai)开发并维护,当前版本 v0.1.3。
推荐 Skills