Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

🏨 IHG积分房查找

v2.2.1

智能查找江浙沪地区45家IHG精选酒店积分房,支持品牌、距离、积分段和行政酒廊筛选,优先推荐高性价比选项。

0· 80·0 current·0 all-time
byEddy@eddylhb

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for eddylhb/find-ihg.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "🏨 IHG积分房查找" (eddylhb/find-ihg) from ClawHub.
Skill page: https://clawhub.ai/eddylhb/find-ihg
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install find-ihg

ClawHub CLI

Package manager switcher

npx clawhub@latest install find-ihg
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The skill description and docs describe a local Python query tool that searches a hotels.json dataset — that capability matches the declared purpose and requires no external credentials. However, the repo package is inconsistent: SKILL.md and GOGO_INSTRUCTIONS refer to a query.py and hotels.json under /home/node/.openclaw/scripts/ihg-monitor-python, and skills.json/simple_skills.json exec entries reference ./scripts/query.py or the /home/node path, but the provided file manifest does NOT include query.py or hotels.json. The package does include maintenance scripts (backup, rollback, health_check, version_audit) that operate on local files. These maintenance scripts are plausible for a deployable skill but their presence without the main query implementation is disproportionate or indicates an incomplete package.
!
Instruction Scope
SKILL.md/GOGO_INSTRUCTIONS instruct the agent to run python3 /home/node/.openclaw/scripts/ihg-monitor-python/query.py, read hotels.json, and use memory/*.md files. Those instructions reference host filesystem paths outside the skill bundle. Because the authoritative query.py and hotels.json are missing from the bundle, the instructions will either fail or (if those paths exist on the host) execute code from the host environment. The health_check.py imports execute_query from query.py and will execute queries if run. There are no instructions to contact external endpoints or to read unrelated system credentials, but the path inconsistencies give the agent broad discretion to run arbitrary local scripts — this is a runtime ambiguity and a risk.
Install Mechanism
There is no install spec (instruction-only), which is lower risk. The included shell/python maintenance scripts (backup.sh, rollback.sh, version_audit.py, health_check.py) perform local filesystem operations (cp, mkdir, reading/writing under /home/node/.openclaw and backups). They do not download code from remote URLs. That is reasonable for maintenance, but because the main executable (query.py) is missing, it's unclear whether the intended runtime would require additional installs or downloads.
Credentials
The skill declares no required environment variables, no credentials, and no special config paths. The included scripts reference only local skill paths and call 'openclaw --version' in backup.sh for informational output. There are no requested secrets or unrelated credentials in the metadata. This is proportionate to the stated purpose.
Persistence & Privilege
The skill is not marked 'always:true' and uses normal exec permissions (python3) and read access to local files. The backup/rollback scripts create and copy files under ~/.openclaw/backups and can modify the skill's own files, which is expected for maintenance. There is no evidence the skill attempts to modify other skills' configs or request system-wide elevated privileges.
What to consider before installing
Do not install or enable this skill yet. The documentation expects a main executable (query.py) and a hotels.json data file, but those critical runtime files are missing from the package — that makes it unclear what will actually run. Ask the provider for the missing files and review the contents of query.py before installing. Specifically: 1) Verify query.py and hotels.json are present and inspect query.py for network calls, telemetry, or attempts to read unrelated system files or environment variables. 2) Confirm the exec path in skills.json matches where query.py will be installed (relative vs absolute paths differ across files). 3) If you must run maintenance scripts (backup.sh, rollback.sh, health_check.py), review them — they operate on ~/.openclaw and backups but do not contact remote hosts. 4) Prefer a package where SKILL.md, skills.json, and the repository file list are consistent (same version labels and included runtime files). If the author cannot provide the missing files or a clear explanation of the path/version mismatches, treat the package as untrusted.

Like a lobster shell, security has layers — review code before you run it.

latestvk976507hfcr8399z71kwawpbad84ppqw
80downloads
0stars
2versions
Updated 2w ago
v2.2.1
MIT-0

🏨 IHG酒店积分房查找技能 (find-ihg)

📋 技能概要

技能ID: find-ihg (原 ihg-monitor)
版本: v2.2
最后更新: 2026-04-08
开发者: BobClaw (OpenClaw运维工程师)
兼容性: OpenClaw 2026.4.2 - 2026.5.x

🎯 核心功能

智能查找江浙沪地区IHG酒店的积分房情况和优惠活动,为钻卡会员提供精准的酒店推荐和积分价值分析,优先推荐高性价比酒店。

🗺️ 地理范围

  • 覆盖区域: 江浙沪3省市 (上海、江苏、浙江)
  • 酒店数量: 45家精选酒店 (较v2.1增加22家)
  • 距离分类: 上海市内/近距离(≤100km)/中等距离(100-200km)/远距离(200-300km)

🏷️ 品牌权重优化

  • 皇冠假日 (Crowne Plaza): 权重系数 1.3x (优先推荐)
  • 华邑 (HUALUXE): 权重系数 1.2x (中式奢华优先)
  • 顶级奢华: 洲际(InterContinental)、丽晶(Regent)
  • 精品设计: 金普顿(Kimpton)、英迪格(Indigo)
  • 生活方式: voco、逸衡(even)
  • 中端商务: 假日(Holiday Inn)
  • 排除品牌: 智选假日(Holiday Inn Express)

🍽️ 特色功能

  • 行政酒廊筛选: 支持必须有/必须无/不限三种模式
  • 智能推荐算法: 综合品牌权重、距离权重、积分段偏好、价值比、行政酒廊评分
  • 积分段偏好: ≤15,000积分(2.0x), 15,000-22,000积分(1.5x), >22,000积分(1.0x)
  • 距离权重: 上海市内(1.8x), 近距离(1.5x), 中等距离(1.3x), 远距离(0.7x)
  • 价值分析: 积分vs现金价值比计算,智能兑换建议

📊 算法核心

推荐评分公式

综合评分 = 基础分 × 品牌权重 × 距离权重 × (积分段权重 + 价值比分数 + 行政酒廊分数)

权重体系

维度权重类型具体规则
品牌乘法系数皇冠假日×1.3, 华邑×1.2, 其他品牌×1.0, voco/假日×0.9
距离乘法系数上海市内×1.8, 近距离×1.5, 中等距离×1.3, 远距离×0.7
积分段加法分数≤15k:2.0, 15-22k:1.5, 22-30k:1.0, >30k:0.5
价值比加法分数>1.3:2.0, >1.1:1.5, >0.9:1.0, ≤0.9:0.5
行政酒廊加法分数有:1.0, 无:0.0

距离分类标准

分类距离范围适用城市权重系数
上海市内不限距离仅限上海行政区内酒店×1.8
近距离≤100km仅限非上海城市×1.5
中等距离100-200km仅限非上海城市×1.3
远距离200-300km仅限非上海城市×0.7

🔧 使用方式

Gogo自然语言调用

Gogo,查一下上海周边IHG积分房
Gogo,查找近距离皇冠假日酒店
Gogo,推荐有行政酒廊的华邑酒店
Gogo,IHG有什么优惠活动

JSON参数查询

{
  "distance_category": "上海市内",
  "brand_type": "华邑",
  "executive_lounge": "true",
  "count": 4
}

命令行调用

python3 /home/node/.openclaw/scripts/ihg-monitor-python/query.py "上海周边"
python3 /home/node/.openclaw/scripts/ihg-monitor-python/query.py "优惠信息"

📁 文件结构

技能目录

~/.openclaw/skills/find-ihg/
├── skills.json          # 技能元数据定义 (v2.2)
├── SKILL.md            # 本说明文档
├── GOGO_INSTRUCTIONS.md # Gogo调用指南
├── references/         # 参考文档目录
└── scripts/           # 辅助脚本目录

执行脚本

~/.openclaw/scripts/ihg-monitor-python/
├── query.py           # 主查询脚本 (v2.2, 20791字节)
└── hotels.json        # 酒店数据文件 (45家, 29791字节)

🔄 版本历史

v2.2 (2026-04-08) - 当前版本

  • 技能重命名: ihg-monitor → find-ihg
  • 数据扩展: 23家 → 45家酒店 (+22家)
  • 品牌权重: 皇冠假日1.3x, 华邑1.2x
  • 距离优化: 新四级分类体系
  • 积分段偏好: 15-22k积分优先推荐
  • 路径清理: 删除早期监控文件,仅保留核心文件
  • 文档统一: 所有文件路径更新为find-ihg

v2.1 (2026-04-07) - 上一版本

  • OpenClaw 4.5完全兼容
  • 增加品牌筛选、行政酒廊过滤
  • 支持JSON参数查询
  • 基本算法架构

v1.x (2026-04-07) - 初始版本

  • Node.js定时任务系统
  • 8家酒店基础监控
  • 飞书推送功能 (已停用)

🎨 输出示例

推荐输出格式

🏨 **上海市内IHG酒店精选推荐**

⏰ 查询时间: 2026-04-08 11:30
👑 会员等级: 钻卡会员
🔍 筛选条件: 距离: 上海市内

## 1. **嘉定华邑酒店**
   📍 城市: 上海
   🚗 车程: 上海市内 (25km)
   ⭐ 品牌: 华邑酒店 (中式奢华, Tier 2)
   🏷️ 积分需求: 16,266
   💰 现金价格: ¥1265
   📊 价值比: 1.48
   🍽️ 行政酒廊: ✅ 有
   📈 推荐评分: 10.99
   ✅ 积分房: 可预订
   💡 建议: 💎 **极佳兑换** (价值比 > 1.3)

⚠️ 注意事项

  1. 数据来源: 当前为模拟数据,生产环境需对接真实API
  2. 定期更新: 酒店数据需定期维护和更新
  3. 价值计算: 积分价值基准为350元/万分 (可根据市场调整)
  4. 品牌策略: 排除智选假日(Holiday Inn Express)品牌
  5. 距离标准: 上海市内包含嘉定、松江等所有上海行政区

📞 技术支持

维护人: BobClaw (OpenClaw运维工程师)
支持文档:

  • memory/ihg-skill-info.md - 技术架构详解
  • memory/ihg-skill-history.md - 技能演进历史
  • memory/TASKS.md - 任务记录

更新时间: 2026-04-08 11:30 CST
升级状态: ✅ 生产就绪

Comments

Loading comments...