Hotel Price Finder - Multi OTA
v1.1.0Compare hotel prices across Booking.com, Agoda, Trip.com in real-time. Free multi-OTA price comparison with direct booking links. No API key required.
⭐ 0· 87·0 current·0 all-time
byYang@yangms30
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (compare Booking.com, Agoda, Trip.com) matches the runtime instructions: the SKILL.md details how to call Xotelo's hotel list and rates endpoints, Agoda autocomplete, and to build OTA booking URLs. No unrelated credentials, binaries, or installs are requested.
Instruction Scope
The instructions instruct the agent to make outbound HTTP calls to data.xotelo.com, Agoda autocomplete endpoints, and build booking links for various OTAs; it also optionally calls Apify if APIFY_API_KEY is set. The skill does not instruct reading local files or unrelated environment variables. Important privacy note: user-provided query data (destination, dates, etc.) will be sent to these third-party endpoints as part of normal operation.
Install Mechanism
No install spec or code files are present (instruction-only), so nothing is written to disk and no external packages are fetched during installation.
Credentials
No required environment variables are declared. APIFY_API_KEY is optional and clearly scoped to an optional Apify-based Agoda scrape; requesting that optional key is proportionate to the described Apify mode.
Persistence & Privilege
always:false and default invocation settings. The skill does not request permanent presence or attempt to modify other skills or agent-wide settings.
Assessment
This skill will send the user's query (destination, dates, number of guests, etc.) to external services (data.xotelo.com, Agoda endpoints, Trip.com/OTA URLs) to fetch results — that's necessary for its functionality. The APIFY_API_KEY is optional and only used for an Apify-based deep scrape; only set it if you trust the source. The skill's source/homepage is unknown, so if you need stronger provenance or privacy guarantees prefer a skill from a known publisher or avoid exposing sensitive personal data (e.g., avoid including full names, passport numbers, or other PII in queries). If you are concerned about logging or telemetry by third-party endpoints, test in a controlled environment or inspect network calls before trusting with sensitive inputs.Like a lobster shell, security has layers — review code before you run it.
agodavk978f0d8n5f55rg9k0e41gqc0584241vbookingvk978f0d8n5f55rg9k0e41gqc0584241vcheapestvk978f0d8n5f55rg9k0e41gqc0584241vhotelvk978f0d8n5f55rg9k0e41gqc0584241vlatestvk978f0d8n5f55rg9k0e41gqc0584241vprice-comparisonvk978f0d8n5f55rg9k0e41gqc0584241vtravelvk978f0d8n5f55rg9k0e41gqc0584241v
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Environment variables
APIFY_API_KEY (optional - Agoda deep search with 22+ fields)required