百度理发店预约

当用户说"预约理发"、"剪头发"、"预约发型师"、"查看预约记录"时触发。用于百度理发店预约。

Security Scan

The skill claims to be a 'Baidu' salon booking tool but its code talks to an unrelated third‑party host and will save user phone/name into your OpenClaw config — the network target and data flows do not match the stated purpose.

Purpose & Capability

The skill name/description say this is for 'Baidu' salon booking, but the Python code's BASE_URL is http://goldsalon999.fun:8888/..., not any Baidu domain or known official API. Reading/writing preferences to ~/.openclaw/openclaw.json is consistent with the SKILL.md, but the external network target is unexpected and unexplained.

Instruction Scope

SKILL.md instructs running scripts that will perform HTTP requests and persist user preferences. It does not disclose the actual remote service endpoint the code uses. The skill will read and write ~/.openclaw/openclaw.json (including phone/name), and will send booking info (including the user's phone) to a third‑party server — behavior not made explicit in the human-facing description.

Install Mechanism

No install spec is provided (instruction + bundled Python script). The script requires Python and the 'requests' library but the skill doesn't declare that dependency. No external installers or archive downloads are used.

Credentials

The skill does not request environment variables or credentials, but it reads and writes the user's ~/.openclaw/openclaw.json to store personal data (phone, name, last selections). Booking requests transmit phone/name and booking details to an external host (goldsalon999.fun). Persisting and transmitting personal contact data to an unverified domain is disproportionate without a clear justification or trustworthy endpoint.

Persistence & Privilege

always is false and the skill does not request elevated privileges. It does persist user preferences into ~/.openclaw/openclaw.json (intended behavior per SKILL.md). Persisting personal data is normal for a booking skill, but users should be aware the data is stored locally and sent to the external server.

What to consider before installing

This skill claims to book 'Baidu' salon appointments but its code sends booking data (including your phone/name) to http://goldsalon999.fun:8888 — a domain unrelated to Baidu. Before installing or running it, ask the author to: (1) explain why it contacts that host and provide the official service endpoint or ownership info; (2) confirm how user data is used/stored and whether the backend is trusted; (3) declare dependencies (e.g., requests). If you must try it, run it in a network‑restricted sandbox, inspect network traffic, or replace BASE_URL with a verified API. Remember to clear sensitive prefs from ~/.openclaw/openclaw.json before sharing the skill or your machine.

预约百度理发店，支持查看店铺、发型师、选择时间、提交预约、查询预约记录。

Tools

先 cd 到 skill 根目录，再 cd scripts/：

cd ~/.openclaw/skills/baidu-hair-salon/scripts/ && python3 booking.py shops
cd ~/.openclaw/skills/baidu-hair-salon/scripts/ && python3 booking.py services
cd ~/.openclaw/skills/baidu-hair-salon/scripts/ && python3 booking.py staff [shop_id]
cd ~/.openclaw/skills/baidu-hair-salon/scripts/ && python3 booking.py dates
cd ~/.openclaw/skills/baidu-hair-salon/scripts/ && python3 booking.py slots <staff_id> <date>
cd ~/.openclaw/skills/baidu-hair-salon/scripts/ && python3 booking.py book <staff_id> <staff_name> <date> <time> <phone> [project]
cd ~/.openclaw/skills/baidu-hair-salon/scripts/ && python3 booking.py list [phone]

预约流程

1. 读取上次偏好 → 从 skills.entries.baidu-hair-salon 获取上次选择的店铺/发型师/服务，询问是否继续使用。预约完成/中断：必须自动保存用户偏好。

2. 问用户选择哪家店 → 调用 shops

   • 展示店铺列表（店名 + 地址）
   • 用户选定后记录 shop_id

3. 查询发型师和空闲时间 → 调用 staff <shop_id> 和 dates

   • 获取可预约日期范围
   • 对每个发型师，查询今天和明天的空闲时间段
   • 一起展示给用户

4. 用户选择发型师和空闲时间

5. 问用户选择服务项目 → 调用 services

   • 展示可选服务（理发、烫发、染发等）
   • 用户选定后记录 serve_type

6. 确认手机号（必填）→ 调用 book

7. 保存本次选择 → 更新 openclaw.json 中的偏好（店铺、发型师、服务）

8. 展示预约结果

回复格式示例（严格按照此格式输出，禁止省略空行）

店铺列表：

目前支持的店铺：

1. 百度大厦店
   地址：百度大厦B1层AE区淋浴间对面
   营业时间：周一至周五 9:00-21:00
   电话：[phone]
　         
2. 百度科技园1号楼店
   地址：百度科技园1号楼B1层食堂和便利店旁
   营业时间：周一至周五 9:00-21:00
   电话：[phone]
　        
3. 百度科技园4号楼店
   地址：百度科技园4号楼负一层下沉广场
   营业时间：周一至周五 9:00-21:00
   电话：[phone]

请回复数字选择哪家店

发型师 + 空闲时间：

可选Tony：
1. 李东 - 资深发型师
   今天 03-25（周三）可约：10:00、14:00、16:00
   明天 03-26（周四）可约：10:00、14:00

2. 王芳 - 总监
   今天 03-25（周三）可约：11:00、15:00
   明天 03-26（周四）可约：09:00、13:00

请选择发型师和时间

服务项目：

可选服务：
1. 剪发
2. 烫发
3. 染发
4. 护理
请回复数字选择

预约成功：

✅ 预约成功，请提前到达哦！
- 店铺：XXX店
- 地址：XXX
- 电话：XXX
- 发型师：XXX
- 日期：XXXX-XX-XX
- 时间：XX:XX
- 项目：男发精剪

用户信息存储

首次使用时：询问用户手机号和姓名。

预约完成/中断：必须自动保存用户偏好到 ~/.openclaw/openclaw.json 的 skills.entries.baidu-hair-salon 下：

{
  "skills": {
    "entries": {
      "baidu-hair-salon": {
        "default_phone": "用户手机号",
        "default_person": "用户姓名",
        "last_shop_id": "店铺ID",
        "last_shop_name": "店铺名称",
        "last_staff_id": "发型师ID",
        "last_staff_name": "发型师姓名",
        "last_service": "服务项目"
      }
    }
  }
}

后续使用时：直接读取配置，已有偏好则询问是否继续使用。

Gotchas

• 手机号必填：预约前必须确认用户手机号
• 先选店铺和服务项目：每次预约前先问用户哪家店、什么服务
• 发型师 ID 是数字：调用 slots/book 时用 staff_id
• 日期格式：YYYY-MM-DD
• 时间格式：HH:MM
• 店铺信息（地址、电话、营业时间）可从 shops 结果获取
• 服务项目可从 services 结果获取
• 用户偏好会保存到 openclaw.json：分享 skill 时记得清除这些敏感信息
• 输出格式必须严格遵循示例：
  • 店铺列表中每块店铺之间必须空一行
  • 禁止使用 emoji（地址、电话、营业时间等都不用 emoji）
  • 信息分段清晰，参考上面的示例