全能订酒店国内版

• Analyzed: May 12, 2026, 2:56 AM
• Findings: 1
• Version: 1.0.0
• Hash: db2af77dcf1ec13337261f5f0b7f272d5da64b3212dcadafe8df49a6beb28730
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a legitimate interface for searching hotels and retrieving pricing via the RollingGo CLI tool. It uses standard package managers (npm/npx and uv/uvx) to execute the 'rollinggo' package and requires a specific API key (RollingGo_API_KEY) for its operations. The instructions in SKILL.md and the reference files are well-structured, focusing entirely on the stated purpose of hotel discovery without any signs of data exfiltration, malicious execution, or prompt injection. IOCs mentioned are limited to the service's official domains: rollinggo.store and agentichotel.cn.