moodtrip-hotel-search

SUSPICIOUS: the core MoodTrip API use fits the hotel-search purpose, and no credential theft or obvious exfiltration is shown. However, the skill expands into local config inspection and automatic setup, and its recommended OpenClaw path executes an unpinned third-party npm bridge (`mcp-remote@latest`) from an unrelated publisher, creating a significant supply-chain risk that is not necessary for a simple hotel-search skill.