RollingGo-Hotel-Booking-Skill

• Analyzed: May 12, 2026, 3:01 AM
• Findings: 1
• Version: 1.0.0
• Hash: 192324e630f0b789a326b9762ad0cb6519309c07c844f78a61e3c526d3578ab9
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill provides a legitimate interface for searching hotels and retrieving pricing via the RollingGo CLI tool. It uses standard package managers (npm/npx and uv/uvx) to execute the 'rollinggo' package and requires a dedicated API key (RollingGo_API_KEY). The documentation in SKILL.md and the reference files (rollinggo-npx.md, rollinggo-uv.md) is well-structured, aligns with the stated purpose, and contains no evidence of malicious intent, data exfiltration, or harmful prompt injection.