← Back to Skills Marketplace
157
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install rollinggo-searchhotel-skill
Description
Hotel search and pricing via the RollingGo CLI. Use when the user wants to search hotels by destination, filter by date/star/budget/tags/distance, inspect ho...
Usage Guidance
This skill appears to do what it says, but consider these operational security points before installing/use: (1) It defaults to fetching and running the latest rollinggo package each run via npx/uvx — for production prefer installing a pinned, reviewed version to avoid unexpected remote code execution. (2) The SKILL ships a public API key for testing; request and configure your own key for production to avoid shared quota or data-mixing. (3) If you allow autonomous agent invocation, be aware that running unpinned remote packages increases the blast radius; consider requiring user confirmation before the agent runs CLI installs or networked commands. (4) If you want extra assurance, check the rollinggo package on the npm/uv registries and the project's homepage (https://mcp.agentichotel.cn) before use.
Capability Analysis
Type: OpenClaw Skill
Name: rollinggo-searchhotel-skill
Version: 1.0.0
The skill bundle is a legitimate integration for the RollingGo hotel search service, providing an interface to its CLI tool via npm (npx) or Python (uvx). It includes a pre-configured public API key for testing and clear instructions for the AI agent to perform hotel searches, filter results, and retrieve pricing details. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found; the use of '@latest' versioning is a standard (though aggressive) practice for ensuring tool freshness and does not indicate malicious intent in this context.
Capability Assessment
Purpose & Capability
Name/description match the declared needs: it requires a RollingGo CLI (rollinggo) and an API key (AIGOHOTEL_API_KEY), which are exactly what a CLI-based hotel search tool would need. The bundled references and npm/uv install entries all point to the same rollinggo package, so required components align with the stated purpose.
Instruction Scope
SKILL.md instructs only on setting the API key and invoking rollinggo subcommands (search-hotels, hotel-detail, hotel-tags). There are no instructions to read unrelated files, access other credentials, or exfiltrate data to unexpected endpoints. It does recommend exporting a provided public API key into the environment, which is operational but within scope.
Install Mechanism
Install is via npm (npx/npm) or uv/uvx tool, i.e., public package registries — a standard, expected mechanism. Note: the skill's default behavior is to run the latest release on every execution (npx --package rollinggo@latest or uvx --refresh), which means remote code will be executed dynamically; this increases runtime risk compared to using a pinned/local install.
Credentials
Only one credential is required (AIGOHOTEL_API_KEY), which is appropriate. The skill includes a pre-configured public API key for testing; this is convenient but not ideal for production. No unrelated secrets or system config paths are requested.
Persistence & Privilege
always is false and the skill does not request system-wide configuration changes or persistent elevated privileges. Autonomous invocation is allowed (platform default) — combined with the dynamic 'latest release' install behavior this slightly increases attack surface, but not by itself a coherence problem.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install rollinggo-searchhotel-skill - After installation, invoke the skill by name or use
/rollinggo-searchhotel-skill - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release with pre-configured public API Key
Metadata
Frequently Asked Questions
What is RollingGo Hotel Search?
Hotel search and pricing via the RollingGo CLI. Use when the user wants to search hotels by destination, filter by date/star/budget/tags/distance, inspect ho... It is an AI Agent Skill for Claude Code / OpenClaw, with 157 downloads so far.
How do I install RollingGo Hotel Search?
Run "/install rollinggo-searchhotel-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is RollingGo Hotel Search free?
Yes, RollingGo Hotel Search is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does RollingGo Hotel Search support?
RollingGo Hotel Search is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created RollingGo Hotel Search?
It is built and maintained by KaiChan (@cnchenkai); the current version is v1.0.0.
More Skills