DINGs 托管式 AI 电话助手（中国、日本餐厅预订）
v1.0.8全自动 AI 电话助手，帮助用户拨打中国餐厅电话完成预订、查询预订状态及获取电子凭证。
⭐ 20· 248·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill claims to perform AI telephone reservations and its SKILL.md exclusively documents calling the TripNow API (voice/outbound, restaurant/search, voice/callback_find). The declared required env (TRIPNOW_API_KEY) and baseUrl align with that purpose; no unrelated credentials or binaries are requested.
Instruction Scope
Instructions direct the agent to collect user PII needed for reservations (customerName, customerPhone, sex, diningTime, etc.) and send it to TripNow endpoints; that is expected for the stated feature but is a privacy-exfiltration vector to an external service. The SKILL.md also instructs storing configuration into ~/.openclaw/openclaw.json (persisting the API key). No instructions request unrelated system files or other secrets.
Install Mechanism
This is an instruction-only skill with no install spec or external downloads, so nothing is written to disk by an installer beyond the guidance to add config to the agent's openclaw.json. That is lower install risk.
Credentials
The skill only requires one credential (TRIPNOW_API_KEY) which is appropriate for a third-party API. This key is sensitive and SKILL.md instructs persisting it in ~/.openclaw/openclaw.json; ensure the key's scope, lifetime, and permissions are limited and protected. Optional CALLBACK_URL will cause outbound POSTs to a user-specified endpoint containing PII.
Persistence & Privilege
always is false; autonomous invocation is allowed (platform default). The skill does instruct storing its own API key in the agent config (acceptable). Note: once enabled, the skill can create outbound phone-call tasks and request callbacks, so it can trigger external actions and transmit user data—this is expected but impactful.
Assessment
This skill appears coherent for a TripNow-based phone-reservation service, but it will transmit users' names and phone numbers to tripnowengine.133.cn and persist your API key in ~/.openclaw/openclaw.json. Before installing: verify the TripNow provider (homepage and trustworthiness), use a limited-scope API key (rotate/revoke if needed), host any callback URL on HTTPS you control, do not paste the API key in shared chats, and confirm the provider's privacy/retention policy and billing model. If you cannot verify the service operator, treat the API key as high-risk and consider not installing.Like a lobster shell, security has layers — review code before you run it.
latestvk9780kcmxdpa0r0axpadn1a6cd84kk79
License
MIT-0
Free to use, modify, and redistribute. No attribution required.