RollingGo Hotel Search

Hotel search and pricing via the RollingGo CLI. Use when the user wants to search hotels by destination, filter by date/star/budget/tags/distance, inspect ho...

This skill appears to do what it says, but consider these operational security points before installing/use: (1) It defaults to fetching and running the latest rollinggo package each run via npx/uvx — for production prefer installing a pinned, reviewed version to avoid unexpected remote code execution. (2) The SKILL ships a public API key for testing; request and configure your own key for production to avoid shared quota or data-mixing. (3) If you allow autonomous agent invocation, be aware that running unpinned remote packages increases the blast radius; consider requiring user confirmation before the agent runs CLI installs or networked commands. (4) If you want extra assurance, check the rollinggo package on the npm/uv registries and the project's homepage (https://mcp.agentichotel.cn) before use.

Type: OpenClaw Skill Name: rollinggo-searchhotel-skill Version: 1.0.0 The skill bundle is a legitimate integration for the RollingGo hotel search service, providing an interface to its CLI tool via npm (npx) or Python (uvx). It includes a pre-configured public API key for testing and clear instructions for the AI agent to perform hotel searches, filter results, and retrieve pricing details. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found; the use of '@latest' versioning is a standard (though aggressive) practice for ensuring tool freshness and does not indicate malicious intent in this context.