Star Hotel Search

Smart hotel search, supporting filtering by location, date, star rating, and budget

This skill appears to do what it says (hotel search), but it will send structured queries to an external MCP server using a public key embedded in the skill text and expects the agent to strip any PII before sending. Before installing or using it: (1) verify the external API domain and that you trust that service (the documentation shows two different domains — ask the author to clarify); (2) test only with non-sensitive queries to confirm PII is not transmitted; (3) consider requesting a private API key from the provider (or using a skill that requires you to provide your own key) so you can revoke it if needed; (4) avoid submitting names, phone numbers, emails, ID numbers, or other personal info in queries because filtering is implemented client-side and may fail. If you need higher assurance, ask the publisher for more details about their MCP endpoint and why the key is embedded.

Type: OpenClaw Skill Name: star-hotel Version: 2.0.0 The skill bundle is classified as benign. It is a 'command-type skill' with no executable code, focusing solely on hotel search functionality. Crucially, the `SKILL.md` and `search.md` files explicitly instruct the agent to remove personal identification information (PII) from the `originQuery` parameter before transmission, and prohibit the transmission of local files or system information. The API key is declared public, and the communication endpoint (`https://mcp.aigohotel.com/mcp`) appears legitimate for the stated purpose, with no evidence of data exfiltration to unauthorized destinations or prompt injection attempts to subvert the agent's intended behavior.