技能详情（站内镜像，无评论）
作者：Anson @ansonfreeman
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v0.1.1
统计：⭐ 1 · 1.5k · 0 current installs · 0 all-time installs
⭐ 1
安装量（当前） 0
🛡 VirusTotal ：良性 · OpenClaw ：可疑
Package：ansonfreeman/hostex
安全扫描（ClawHub）
- VirusTotal ：良性
- OpenClaw ：可疑
OpenClaw 评估
The skill's code and instructions match a Hostex API client, but the registry metadata omits required environment variables (HOSTEX_ACCESS_TOKEN, HOSTEX_ALLOW_WRITES, HOSTEX_BASE_URL) and the source/homepage are unknown — verify before providing credentials or enabling writes.
目的
Name/description, OpenAPI file, and scripts consistently implement a Hostex API client (read and guarded write operations). However the registry metadata lists no required credentials while the SKILL.md and scripts require HOSTEX_ACCESS_TOKEN (and optionally HOSTEX_ALLOW_WRITES/HOSTEX_BASE_URL). This metadata mismatch is unexpected.
说明范围
SKILL.md and the scripts restrict actions to the Hostex API and local OpenAPI caching; write operations are gated by an environment flag and explicit --confirm flow. There are no instructions to read unrelated files or exfiltrate data to third-party endpoints.
安装机制
No install spec (instruction-only). Scripts are included in the bundle but there is no download-from-URL or third-party package installation. Risk from install mechanism is low.
证书
The skill legitimately requires an API token (HOSTEX_ACCESS_TOKEN) and optionally HOSTEX_ALLOW_WRITES and HOSTEX_BASE_URL, but the registry metadata declares no required env vars or primary credential. Requesting a Hostex PAT is proportional for the stated purpose, but the omission from metadata is an incoherence that should be resolved before granting credentials.
持久
always is false and the skill does not request automatic persistent privileges or modify other skills. The openapi-sync script writes a local openapi.json copy under skills/hostex/references, which is reasonable for caching but worth noting.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Hostex」。简介：Hostex (hostex.io) OpenAPI v3.0 skill for querying and managing vacation rental…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/ansonfreeman/hostex/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
---
name: hostex
description: "Hostex (hostex.io) OpenAPI v3.0 skill for querying and managing vacation rental properties, room types, reservations, availability, listing calendars, guest messaging, reviews, and webhooks via the Hostex API. Use when you need to integrate with Hostex API using a Hostex PAT (Hostex-Access-Token / HostexAccessToken) or when you need safe, intent-level API calls (read-only by default, optional write operations with explicit confirmation)."
---
# Hostex API Skill (Node)
## Auth (PAT)
- Set env var: `HOSTEX_ACCESS_TOKEN`
- Requests use header: `Hostex-Access-Token: <PAT>`
- OpenAPI security scheme name: `HostexAccessToken`
**Default recommendation:** use a **read-only** PAT.
## Dates / timezone
- All date params are `YYYY-MM-DD`
- Interpret dates in **property timezone** (no UTC timestamps)
## OpenAPI source of truth
Stable OpenAPI JSON:
- https://hostex.io/open_api/v3/config.json
Use `scripts/openapi-sync.mjs` to cache a local copy into `references/openapi.json`.
## Quick commands (scripts)
All scripts expect `HOSTEX_ACCESS_TOKEN`.
### Read-only (safe)
List properties:
```bash
node skills/hostex/scripts/hostex-read.mjs list-properties --limit 20
```
List reservations (by check-in range):
```bash
node skills/hostex/scripts/hostex-read.mjs list-reservations --start-check-in-date 2026-02-01 --end-check-in-date 2026-02-28 --limit 20
```
List reservations (by reservation code):
```bash
node skills/hostex/scripts/hostex-read.mjs list-reservations --reservation-code 0-1234567-abcdef
```
Get availability:
```bash
node skills/hostex/scripts/hostex-read.mjs get-availabilities --start 2026-02-10 --end 2026-02-20 --property-id 123
```
### Writes (guarded)
Writes are disabled unless:
- `HOSTEX_ALLOW_WRITES=true`
and you pass `--confirm`.
Send message:
```bash
HOSTEX_ALLOW_WRITES=true node skills/hostex/scripts/hostex-write.mjs send-message --conversation-id 123 --text "Hello!" --confirm
```
Update listing prices (single range example):
```bash
HOSTEX_ALLOW_WRITES=true node skills/hostex/scripts/hostex-write.mjs update-listing-prices
--channel-type airbnb
--listing-id 456
--start 2026-02-10
--end 2026-02-15
--price 199
--confirm
```
Update listing prices (multi-range in one request):
```bash
HOSTEX_ALLOW_WRITES=true node skills/hostex/scripts/hostex-write.mjs update-listing-prices
--channel-type booking_site
--listing-id 100541-10072
--prices "2026-02-03..2026-02-05:599,2026-02-06..2026-02-07:699,2026-02-08..2026-02-09:599"
--confirm
```
Create reservation (Direct Booking) (example):
```bash
HOSTEX_ALLOW_WRITES=true node skills/hostex/scripts/hostex-write.mjs create-reservation
--property-id 123
--custom-channel-id 77
--check-in-date 2026-02-10
--check-out-date 2026-02-12
--guest-name "Alice"
--currency USD
--rate-amount 200
--commission-amount 0
--received-amount 200
--income-method-id 3
--confirm
```
Update property availabilities (close/open) (example):
```bash
# Close a property for a date range
HOSTEX_ALLOW_WRITES=true node skills/hostex/scripts/hostex-write.mjs update-availabilities
--property-ids "11322075"
--available false
--start-date 2026-02-03
--end-date 2027-02-02
--confirm
```
## Operational guardrails (mandatory)
When doing any write operation:
1) **Summarize the change** (who/what/when/how much).
2) Require the user to explicitly confirm (e.g. `CONFIRM`).
3) Prefer `--dry-run` first if available.
## Notes
- Pagination: endpoints commonly accept `offset` + `limit` (limit max 100).
- Never print tokens in logs; scripts redact secrets automatically.