by 下载技能包
最后更新
2026/2/26
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill aims to perform full bookings but doesn't say how it will authenticate with Airbnb/Booking.com or handle payments. Before installing: 1) Ask the author how bookings are executed — do they use official APIs/OAuth, or will the agent prompt you to paste credentials/payment info? 2) Ask where account or payment data will be stored and whether it's encrypted; avoid skills that store secrets in plaintext under ~/booking. 3) If you plan to allow execution, prefer an implementation that docum...详细分析 ▾
⚠ 用途与能力
The name/description promise 'end-to-end execution' (i.e., actually placing bookings), but the skill declares no required credentials, APIs, or payment integration. A booking agent that can 'execute' legitimately needs account access, payment handling, or OAuth flows; those are not requested or documented here.
⚠ 指令范围
SKILL.md explicitly instructs the agent to read/write ~/booking/memory.md and other files in the user's home, to use web_fetch/browser to verify live prices, to check maps for walking times, and to "execute when asked" (perform bookings). Those runtime actions include accessing the filesystem and external services and could prompt the agent to request/store sensitive data (credentials, payment details). The declared metadata did not list these config paths or external-service requirements.
✓ 安装机制
This is an instruction-only skill with no install spec and no code files, which minimizes install-time risks (nothing is downloaded or written during installation).
⚠ 凭证需求
The skill declares no required env vars or primary credential, yet its behavior implies it will need account access to platforms and payment methods. Additionally, the SKILL.md directs storing persistent data under ~/booking (a config path) but the registry metadata lists no required config paths — a mismatch that could hide how/where sensitive data will be stored.
⚠ 持久化与权限
The skill instructs creation and use of persistent files under the user's home (~/booking/memory.md, history.md, alerts.md) without declaring this persistence in metadata. While it is not set to always:true, the ability to store data in the user's home and later read it constitutes persistent state and can retain sensitive info (preferences, possibly payment/account details) if the agent is asked to 'execute' bookings.
安全有层次，运行前请审查代码。
运行时依赖
🖥️ OSLinux · macOS · Windows
版本
latestv1.0.02026/2/15
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install booking
镜像加速npx clawhub@latest install booking --registry https://cn.longxiaskill.com