全球旅行预订

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Your travel search details may be queried against several hotel platforms.

Why it was flagged

The skill is explicitly intended to call multiple external hotel-provider APIs. This is expected for hotel aggregation, but it means user search details such as city, dates, and keywords may be sent outside the local agent environment.

Skill content
必须调用各平台API获取真实数据
Recommendation

Use the skill only for searches you are comfortable sharing with those providers, and review the source-labeled results before acting on them.

What this means

The skill may produce incomplete or empty results despite describing real-time multi-platform hotel aggregation.

Why it was flagged

The visible provider-search code is marked as a simulated/TODO implementation and returns no results, while the skill description advertises real multi-platform aggregation and booking support. This looks more like incomplete functionality than malicious behavior, but users should not assume the advertised integrations are actually live.

Skill content
# TODO: 实现真实的携程API调用
        return []
Recommendation

Verify that real provider API integrations and any required credentials are configured before relying on results for booking decisions.