book-hotels
v1.0.0使用 RollingGo CLI 查询酒店信息、筛选结果、读取酒店标签和获取房型价格。当用户需要按目的地 / 日期 / 星级 / 预算 / 标签 / 距离搜索酒店、查看酒店详情与房型报价，或读取酒店标签库时触发本技能。触发短语——"搜索酒店"、"查酒店"、"酒店详情"、"房型价格"、"酒店标签"、"附近酒店"、"...
⭐ 0· 181·0 current·0 all-time
byzlon@longcreat
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description describe a hotel-search CLI wrapper; declared requirements (rollinggo binary or runtimes able to run it, plus AIGOHOTEL_API_KEY) and install specs (npm/uv package 'rollinggo') line up with that purpose. Nothing requested appears unrelated to hotel search.
Instruction Scope
SKILL.md instructs the agent to run rollinggo commands (search-hotels, hotel-detail, hotel-tags), parse JSON, and extract hotelId. It only references the declared API key env var or an explicit --api-key parameter. It does not instruct reading unrelated files, other env vars, or sending data to unexpected endpoints beyond using results/booking URLs returned by the CLI.
Install Mechanism
Install specs use well-known package managers (npm/uv) to install a package named 'rollinggo' and expose the expected binary. This is a reasonable, standard mechanism for a CLI wrapper. No arbitrary download URLs or archive extraction from unknown servers are used.
Credentials
Only one credential is required: AIGOHOTEL_API_KEY, declared as the primaryEnv and documented in SKILL.md. That matches the skill's need to call the RollingGo API. No unrelated secrets or multiple unrelated credentials are requested.
Persistence & Privilege
always is false and the skill is user-invocable. There are no instructions to modify other skills or system-wide configuration. The skill does not request persistent elevated privileges.
Assessment
This skill is a thin, instruction-only wrapper around the RollingGo CLI and appears coherent. Before installing: (1) confirm you trust the source/publisher of the 'rollinggo' package and the homepage (https://mcp.agentichotel.cn); (2) prepare an AIGOHOTEL_API_KEY and treat it like a secret—prefer setting it in your environment rather than pasting it into chat; (3) consider using npx/uvx (temporary execution) if you don't want a global install; (4) the CLI will call external hotel/booking endpoints and may return booking URLs—validate those links before clicking; (5) if you need stronger assurance, review the rollinggo package code (npm/uv registry) to verify it behaves as expected.Like a lobster shell, security has layers — review code before you run it.
latestvk97ae9j1k16eke3dxasmtwar9d82tryg
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🏨 Clawdis
Any binrollinggo, npx, node, uvx, uv
EnvAIGOHOTEL_API_KEY
Primary envAIGOHOTEL_API_KEY
Install
Install rollinggo (npm)
Bins: rollinggo
npm i -g rollinggoInstall rollinggo (uv)
Bins: rollinggo
uv tool install rollinggo