rollinggo-hotel-cn
v1.0.1使用 RollingGo CLI 查询酒店信息、筛选结果、读取酒店标签和获取房型价格。当用户需要按目的地 / 日期 / 星级 / 预算 / 标签 / 距离搜索酒店、查看酒店详情与房型报价,或读取酒店标签库时触发本技能。触发短语——"搜索酒店"、"查酒店"、"酒店详情"、"房型价格"、"酒店标签"、"附近酒店"、"...
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description describe a CLI-driven hotel search/detail workflow; declared requirement of a RollingGo_API_KEY and an executable named 'rollinggo' (or runners npx/node/uvx/uv) matches that purpose. The install entries (npm/uv package 'rollinggo' producing a rollinggo binary) are expected for a distributed CLI.
Instruction Scope
SKILL.md instructs only to run the rollinggo CLI commands (search-hotels, hotel-detail, hotel-tags), to read the API key from --api-key or RollingGo_API_KEY, and to parse JSON stdout. It does not request unrelated files, system credentials, or transmit data to unexpected endpoints. However it explicitly instructs using npx/uvx to fetch the latest package each run — this grants the skill the ability to execute freshly published remote code at runtime (supply-chain/execution risk).
Install Mechanism
Install spec uses standard package managers (npm/uv) for a package named 'rollinggo' which creates the 'rollinggo' binary — this is proportionate. The higher-risk element is the SKILL.md default of invoking 'npx --package rollinggo@latest' or 'uvx --refresh --from rollinggo' on every run, which executes remote code fetched at runtime and can introduce supply-chain risk if the package or publisher is compromised.
Credentials
Only RollingGo_API_KEY is required and declared as the primary credential. That single API key is appropriate for a CLI that talks to a hotel search service. No other unrelated secrets, config paths, or broad system tokens are requested.
Persistence & Privilege
always is false and the skill does not request elevated or permanent platform privileges. It does not attempt to modify other skills' configs or require persistent presence beyond normal installation. The skill can be invoked autonomously by the agent (platform default), which is expected for skills.
Assessment
This skill appears to do what it says: run a RollingGo CLI to search hotels and fetch details using a RollingGo_API_KEY. Before installing, consider: (1) Trust the rollinggo package and its publisher — the SKILL uses npx/uvx@latest by default, which will run whatever code is published at each invocation (supply‑chain risk). If you prefer more control, pin to a specific vetted version or install the package locally instead of using npx/uvx --refresh. (2) Only provide an API key with the minimal permissions needed and avoid reusing broad credentials. (3) Verify the package and homepage (https://mcp.agentichotel.cn) and, if possible, inspect the rollinggo package source on the public registry before use. (4) The skill does not request other secrets or system files, but remember that running remote packages executes code on your environment — treat that as a normal software-supply-chain consideration.Like a lobster shell, security has layers — review code before you run it.
Runtime requirements
🏨 Clawdis
Any binrollinggo, npx, node, uvx, uv
EnvRollingGo_API_KEY
Primary envRollingGo_API_KEY
Install
Install rollinggo (npm)
Bins: rollinggo
npm i -g rollinggoInstall rollinggo (uv)
Bins: rollinggo
uv tool install rollinggolatest
RollingGo 酒店 CLI
适用范围
✅ 在以下情况使用本技能:
- 查找候选酒店: 用户需要按城市、地标、机场或具体地址搜索附近酒店(例如:“查找东京迪士尼附近的酒店”)。
- 多条件精准筛选: 用户需要在搜索时结合自然语言意图,并严格限制入离日期、入住人数、预算上限、星级区间或距离范围。
- 基于标签与品牌匹配: 用户想寻找包含特定设施或属于特定品牌的酒店(如“亲子友好”、“包含早餐”、“万豪”等),技能可先查询标签库以进行精准筛选。
- 查询房型与实时报价: 用户想深入了解某家具体酒店(通过 hotelId)的可用房型、实时价格、退款政策或具体配置。
- 酒店对比与评估: 用户需要基于真实的结构化数据和当前报价,在多个候选酒店中进行对比分析。
- 酒店预订: 用户选定酒店想要完成预订时。可提取并提供结果中的预订 URL 或酒店主页链接,引导用户直接点击完成购买。
❌ 以下情况不适用:
- 用户询问非酒店类的旅游预订业务(如机票、火车票、接送机、租车等)。
API Key
解析顺序:--api-key 参数 → RollingGo_API_KEY 环境变量。
还没有 Key?前往申请:https://mcp.agentichotel.cn/apply
运行环境
根据用户环境选择,加载对应的参考文件,并在整个会话中保持一致。
npm、npx、Node 或无明确偏好: 加载 references/rollinggo-npx.mduv、uvx、PyPI 或 Python: 加载 references/rollinggo-uv.md- 一致性检查或对比: 同时加载两个参考文件
未明确指定时默认使用 npm/npx(跨环境兼容性更好)。
版本新鲜度(始终使用最新版)
本技能默认策略:每次执行都使用最新发布版本。
- npm/npx:
npx --yes --package rollinggo@latest rollinggo ... - uvx:
uvx --refresh --from rollinggo rollinggo ...
如果使用已安装命令而不是临时执行,先升级再运行:
- npm 全局:
npm install -g rollinggo@latest - uv 工具:
uv tool upgrade rollinggo
主要工作流
除非用户已经把问题限定在某个具体步骤,否则按顺序执行:
- 明确需求:目的地、日期、晚数、入住人数、预算、星级、标签、距离
- 如果需要标签筛选 → 先执行
hotel-tags获取有效标签字符串 - 执行
search-hotels→ 解析 JSON → 提取hotelId - 执行
hotel-detail --hotel-id <id>查询房型和价格 - 如果结果不理想 → 放宽筛选条件后重新搜索
常用命令速查
# 获取标签库
rollinggo hotel-tags
# 搜索酒店(最少必填参数)
rollinggo search-hotels \
--origin-query "<用户的自然语言描述>" \
--place "<目的地>" \
--place-type "<查看 --help 获取合法值>"
# 查询酒店详情与价格
rollinggo hotel-detail \
--hotel-id <id> \
--check-in-date YYYY-MM-DD \
--check-out-date YYYY-MM-DD \
--adult-count 2 --room-count 1
# 查看所有可用参数
rollinggo search-hotels --help
rollinggo hotel-detail --help
关键规则
--place-type必须使用rollinggo search-hotels --help里显示的精确值--star-ratings格式:最小值,最大值,如4.0,5.0--format table只允许用于search-hotels;hotel-detail和hotel-tags会拒绝该参数--child-count的数量必须与--child-age参数的个数一致--check-out-date必须晚于--check-in-date- 有
hotelId时优先使用--hotel-id,不要依赖--name
输出说明
- stdout → 结果数据(默认 JSON)
- stderr → 仅错误信息
- 退出码
0成功 ·1HTTP/网络失败 ·2CLI 参数校验失败 - 结果中包含预订 URL 与酒店详情页链接,可供下游直接使用
无结果时的放宽策略
按顺序尝试:移除 --star-ratings → 增大 --size → 增大 --distance-in-meter → 移除标签筛选 → 放宽日期或预算
Comments
Loading comments...
