心仪的酒店降价了国内版
PassAudited by ClawScan on May 12, 2026.
Overview
This hotel price-monitoring skill appears purpose-aligned, but it relies on a third-party RollingGo CLI/API key and may create persistent hotel-monitoring reminders.
Before installing, make sure you trust RollingGo as the hotel-data provider, understand that hotel queries and monitoring details may be sent to that service, and confirm how to stop or delete any persistent hotel price alerts.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing or running the skill will execute a third-party CLI package that was not included in this review.
The skill depends on an external package installed at the latest available version, so package behavior could change over time and the package source code was not part of the reviewed artifacts.
node | package: rollinggo@latest | creates binaries: rollinggo
Install only if you trust the RollingGo package/provider; consider pinning a known-good version where possible and review package provenance before use.
Your RollingGo API key will be used to make hotel search and detail requests.
The skill requires a provider API key to query hotel data. This is aligned with the stated service integration, but it is still a credential the agent/CLI can use.
"primaryEnv": "RollingGo_API_KEY", "requires": { "env": ["RollingGo_API_KEY"] }Use a dedicated API key if available, avoid pasting it into shared chats, and revoke or rotate it if you stop using the service.
Your travel plans and hotel-monitoring preferences may be stored and reused for future reminders.
The skill explicitly hands off persistent storage and repeated price checks to the host agent, which may retain hotel watchlists, dates, and monitoring parameters.
状态存储（用户关注的酒店列表、监控参数） - 定时复查（按频率重新查询价格）
Confirm the monitoring frequency, notification method, stored details, and how to delete or stop a monitor before enabling alerts.