技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.5.0
统计：⭐ 0 · 1.3k · 1 current installs · 2 all-time installs
⭐ 0
安装量（当前） 2
🛡 VirusTotal ：可疑 · OpenClaw ：可疑
Package：arein/concierge
安全扫描（ClawHub）
- VirusTotal ：可疑
- OpenClaw ：可疑
OpenClaw 评估
The skill's instructions legitimately require multiple sensitive API keys and run a locally‑exposed call server, but the registry metadata omits those credentials and there are operational risks (ngrok exposure, stored transcripts) that the user should understand before installing.
目的
The skill's stated purpose (finding contacts and placing AI phone calls) does justify Twilio/Deepgram/ElevenLabs/Anthropic/ngrok credentials. However, the registry metadata claims no required env vars/credentials while the SKILL.md and CALL-SETUP.md clearly require many sensitive keys — this mismatch is an incoherence that should be resolved before trusting the package.
说明范围
Runtime instructions include starting a local Node call server, auto-starting ngrok to expose it publicly, handling Twilio media streams, and writing per-run logs (including transcripts) under ~/.config/concierge/call-runs/. Those actions are functionally necessary for the described feature but broaden the operational scope (network exposure and persistent storage of potentially sensitive audio/transcripts).
安装机制
No install spec or remote download is included (instruction-only), which reduces supply-chain risk. There is a small code footprint (vitest config) and no installers that fetch arbitrary archives.
证书
The number and sensitivity of required credentials (Twilio SID/AuthToken, Twilio phone number, Deepgram key, ElevenLabs key and voice ID, Anthropic key, optional ngrok token) are proportionate to the call capability, but the registry declaring 'none' is misleading. Also, the skill stores these keys in plaintext config (~/.config/concierge/config.json5) and displays masked keys only — there is no mention of encryption, which increases the risk …
持久
The skill is not always-enabled and does not request elevated platform privileges. It does, however, auto-manage long‑running processes (ngrok and a local server) when making calls and writes logs to the user's config directory; auto-exposing a local service via ngrok is powerful and should be used with care but is coherent with the feature set.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Travel Concierge CLI」。简介：Find accommodation contact details and run AI-assisted booking calls。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/arein/concierge/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。