Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Uplo Hospitality

v1.0.0

AI-powered hospitality knowledge management. Search guest service standards, property procedures, F&B operations, and event planning documentation with struc...

0· 158·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for roojenkins/uplo-hospitality.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Uplo Hospitality" (roojenkins/uplo-hospitality) from ClawHub.
Skill page: https://clawhub.ai/roojenkins/uplo-hospitality
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install uplo-hospitality

ClawHub CLI

Package manager switcher

npx clawhub@latest install uplo-hospitality
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The SKILL.md, README, and skill.json consistently describe a knowledge-search/GraphRAG service for hospitality and the declared MCP capabilities (search_knowledge, search_with_context, export_org_context, get_directives, etc.) align with that purpose. However, the registry summary at the top said 'Required env vars: none' while skill.json declares two required config fields (agentdocs_url and api_key). This metadata mismatch is noteworthy and could confuse deployers about what secrets will actually be needed.
Instruction Scope
The runtime instructions are scoped to querying the UPLO knowledge base and related actions (search, export, find owner, log conversation). These map to the skill purpose. Important caveats: export_org_context can return an entire organizational blueprint and log_conversation sends summaries (possibly sensitive) to the service — both are legitimate for a knowledge-management skill but are high-sensitivity actions. SKILL.md does not instruct the agent to read local files or unrelated system data, which is good.
!
Install Mechanism
Although the registry lists 'instruction-only', the README and skill.json indicate the MCP runtime will be launched via npx @agentdocs1/mcp-server --http. That implies the agent will fetch and run code from npm at runtime. The skill package @agentdocs1/mcp-server is not a well-known, pre-reviewed system download in this context and will execute code fetched from the public registry. This is standard for MCP-style skills but increases risk: verify the npm package publisher and package contents before allowing runtime installs.
!
Credentials
skill.json requires agentdocs_url and api_key (MCP token) which are appropriate for connecting to an external UPLO instance; these are proportionate to the stated functionality. However the registry metadata claimed no required env vars — a mismatch. Also, the api_key will grant the skill access to potentially large amounts of proprietary org data (including exports and directives), so ensure the token's scope is limited and you trust the UPLO endpoint before providing credentials.
Persistence & Privilege
The skill is not marked always:true and uses the default of allowing autonomous invocation (normal). The skill does not request system-wide config modification or access to other skills' credentials. Its MCP transport is HTTP to the configured UPLO instance, which is expected for a remote knowledge service.
What to consider before installing
This skill appears to do what it claims (connect to a UPLO hospitality knowledge service), but take these precautions before installing: 1) Verify the publisher and the UPLO instance URL (agentdocs_url) — only point to a trusted, internal/official instance. 2) Review the npm package @agentdocs1/mcp-server (publisher, version, and source) if your agent will run npx to fetch it; prefer pinned, audited releases. 3) Provide an API key with the minimum necessary scope and rotate/revoke it after testing. 4) Be aware export_org_context and log_conversation will transmit potentially sensitive organizational data—test on non-production data first and confirm retention/usage policies with the provider. 5) Resolve the metadata mismatch (registry showing no required env vars vs skill.json requiring config) before provisioning credentials so you know exactly what will be sent to the service.

Like a lobster shell, security has layers — review code before you run it.

latestvk971qvpyf5xj26sqfahf6wg6f9839ewx
158downloads
0stars
1versions
Updated 1m ago
v1.0.0
MIT-0

UPLO Hospitality — Guest Experience & Property Operations Intelligence

Hotels, resorts, and hospitality groups run on operational consistency across properties: brand standards manuals, front desk SOPs, housekeeping inspection checklists, F&B recipe costing sheets, banquet event orders, revenue management guidelines, and guest recovery protocols. UPLO centralizes this operational knowledge so that whether someone is at the flagship property or the newest acquisition, they can find the right procedure in seconds.

Session Start

Hospitality organizations often manage multiple properties or brands with different operational tiers. Your identity context determines which property documentation you can access — a boutique brand's service standards differ from the convention hotel's, and both may be in the same portfolio.

get_identity_context

When to Use

  • A front desk agent encounters a guest with a confirmed reservation but no available rooms and needs the walk policy and compensation guidelines
  • The banquet captain needs the setup specifications and AV requirements for a 300-person corporate gala scheduled for Saturday
  • A new F&B manager asks what the target food cost percentage is for the rooftop restaurant and which menu items are below margin threshold
  • Housekeeping wants to verify the deep cleaning protocol for a suite after a guest reported a bed bug sighting
  • Revenue management asks what the dynamic pricing guardrails are during citywide convention dates
  • The general manager needs to compile guest satisfaction scores and TripAdvisor response metrics for the quarterly owner's report
  • A guest relations manager is handling an escalated complaint about a wedding reception and needs the service recovery authority matrix

Example Workflows

VIP Arrival Preparation

A high-profile repeat guest is arriving tomorrow. The guest relations team needs to prepare a seamless experience.

search_knowledge query="VIP guest arrival protocol including pre-arrival checklist and amenity placement standards"
search_with_context query="guest preference history program and loyalty tier recognition procedures"
search_knowledge query="executive suite setup specifications and turndown service enhancements for VIP stays"

Food & Beverage Cost Control Review

The F&B director notices that the poolside bar's pour cost has spiked 8 points over the last two months and needs to investigate.

search_knowledge query="beverage inventory control procedures and pour cost calculation methodology"
search_knowledge query="poolside bar drink recipes and standard pour sizes for premium spirits"
search_with_context query="F&B purchasing agreements and approved supplier pricing for liquor and wine"

Compare documented standard pours and pricing against actual consumption to identify variance sources.

Key Tools for Hospitality

search_knowledge — Operational SOPs are the backbone of hospitality. When a team member needs a specific procedure, this is the fastest path: query="late checkout policy and authorization limits by front desk role level". Hospitality runs on procedures that need to be followed consistently, so precision matters.

search_with_context — Guest experience questions often cross departmental boundaries. A query about query="managing a large group check-in for 150 rooms including luggage logistics, welcome reception setup, and billing master account procedures" touches front office, bell services, banquets, and accounting.

get_directives — Brand standards and seasonal priorities flow from ownership or management company leadership. A directive to "achieve 90% TripAdvisor response rate" or "reduce F&B waste by 15% in Q3" directly shapes operational decisions.

export_org_context — Valuable for general manager transitions, brand conversions, or management company takeovers. The full organizational export provides a complete operational blueprint of the property.

log_conversation — Hospitality consultations often involve guest-facing decisions with financial implications (comping rooms, upgrading suites, waiving resort fees). Log these for audit and training purposes: summary="Advised on service recovery for wedding group with sound system failure" topics='["service-recovery", "banquets", "guest-compensation"]'

Tips

  • Hospitality knowledge is highly property-specific. Always include the property name or brand tier in your queries. The check-in process at a select-service hotel is fundamentally different from a luxury resort — generic queries will return irrelevant results.
  • Seasonal operations change everything. Pool opening/closing procedures, holiday staffing matrices, and seasonal menu changeovers are time-dependent. Include the season or specific date range when searching for operational procedures.
  • Guest service recovery has a financial dimension. When advising on how to handle a complaint, always search for the service recovery authority matrix — it defines what each role level can authorize without escalation (e.g., front desk can comp breakfast, only AGM can comp a night's stay).
  • F&B operations generate some of the most granular documentation in hospitality: recipes with costing, vendor contracts, health inspection records, liquor license requirements. Search specifically within F&B document types when the question is food or beverage related.

Comments

Loading comments...