Skills rollinggo-searchhotel

📦

rollinggo-searchhotel

Name: rollinggo-searchhotel
Author: RollingGo-AI

Content revision r1 High Risk 📁 Filesystem access🔑 Env variables⚙️ External commands🌐 Network access

Search Hotels with RollingGo

Hotel search often needs current prices, tags, and room details. This skill uses RollingGo CLI to find hotels and compare structured results.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Stop for confirmation before installing.

Review the plan and obtain explicit user consent before changing files.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "rollinggo-searchhotel" from https://skillstore.io/skills/rollinggo-ai-rollinggo-searchhotel.md and its manifest at https://skillstore.io/api/skills/rollinggo-ai-rollinggo-searchhotel/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/rollinggo-ai-rollinggo-searchhotel.md Signed manifest GET /api/skills/rollinggo-ai-rollinggo-searchhotel/manifest Signed lockfile GET /api/skills/rollinggo-ai-rollinggo-searchhotel/lockfile

Test it

Using "rollinggo-searchhotel". Find hotels near Tokyo Disney for two adults in early April.

Expected outcome:

A ranked shortlist with hotel names, nightly prices, star ratings, distance, and available booking links.

Using "rollinggo-searchhotel". Compare details for selected hotel IDs.

Expected outcome:

A concise comparison of room types, total stay prices, refund terms, and reasons to choose each option.

Using "rollinggo-searchhotel". Find family friendly hotels with breakfast near Shanghai Disney.

Expected outcome:

A filtered list using valid RollingGo tags, with notes about budget fit and distance from the destination.

Security Audit

High Risk

v4 • 7/5/2026 Open versioned report

The skill is not overtly malicious and I found no prompt injection attempt. It does handle a RollingGo API key and directs users to run mutable third-party CLI packages, so the main risks are credential exposure and supply-chain drift.

Files scanned

584

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (5)

High

references/claw-host-env.md:31

Environment file access

或写入宿主的 `.env` 文件:`~/.openclaw/.env`(macOS/Linux)/ `%USERPROFILE%\.openclaw\.env`(Windows)。

The documentation recommends storing or injecting the API key in host or sandbox configuration. This can persist secrets and broaden exposure if the configuration is shared.

High

references/claw-host-env.md:44

Environment file access

宿主 env 配置**不会**自动传入 sandbox 进程。需在 sandbox 内直接注入 `RollingGo_API_KEY`:`agents.defaults.sandbox.docker.

The documentation recommends storing or injecting the API key in host or sandbox configuration. This can persist secrets and broaden exposure if the configuration is shared.

High

SKILL.md:55-63 references/rollinggo-npx.md:53-63 references/rollinggo-uv.md:52-64

Mutable Latest Package Execution

The skill instructs agents to run rollinggo@latest through npx or uvx and to upgrade installed tools before use. A future package release could change executed code without marketplace review.

The instructions explicitly prefer @latest and refresh or upgrade behavior in multiple files. This is a clear supply-chain risk even though it supports freshness.

Medium

references/rollinggo-npx.md:78-79 references/rollinggo-npx.md:143-145 references/rollinggo-uv.md:79-80 references/rollinggo-uv.md:145-146

API Key In Command-Line Arguments

The reference docs show using --api-key with placeholder secrets. Real API keys passed this way may be exposed through shell history, process listings, or logs.

The documentation repeatedly presents --api-key usage. The values are placeholders, but the recommended pattern creates a common secret exposure channel.

Medium

references/claw-host-env.md:25-32 references/claw-host-env.md:42-44

Broad Host Secret Injection Guidance

The host environment reference allows API key injection at host and sandbox configuration levels. Shared scopes can expose the same credential to more skills or containers than needed.

The file directly documents host-level and sandbox-level environment injection. The risk depends on host configuration, but the broad-scope guidance is explicit.

Capability review items (32)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High

references/claw-host-env.md:31

Hidden file in home directory

或写入宿主的 `.env` 文件:`~/.openclaw/.env`(macOS/Linux)/ `%USERPROFILE%\.openclaw\.env`(Windows)。

The documentation recommends storing or injecting the API key in host or sandbox configuration. This can persist secrets and broaden exposure if the configuration is shared.

High

references/claw-host-env.md:3

Generic API/secret keys

本技能需要在进程里能读到 `RollingGo_API_KEY`。如果宿主在不同 run 间丢失该变量,请使用宿主级注入而非 shell export。

The skill intentionally uses RollingGo_API_KEY as a credential for a third-party CLI and API. This is expected behavior, but it is real secret handling in the user environment.

High

references/claw-host-env.md:18

Generic API/secret keys

"env": { "RollingGo_API_KEY": "YOUR_KEY" }

The skill intentionally uses RollingGo_API_KEY as a credential for a third-party CLI and API. This is expected behavior, but it is real secret handling in the user environment.

High

references/claw-host-env.md:28

Generic API/secret keys

{ "env": { "RollingGo_API_KEY": "YOUR_KEY" } }

The skill intentionally uses RollingGo_API_KEY as a credential for a third-party CLI and API. This is expected behavior, but it is real secret handling in the user environment.

High

references/claw-host-env.md:44

Generic API/secret keys

宿主 env 配置**不会**自动传入 sandbox 进程。需在 sandbox 内直接注入 `RollingGo_API_KEY`:`agents.defaults.sandbox.docker.

The skill intentionally uses RollingGo_API_KEY as a credential for a third-party CLI and API. This is expected behavior, but it is real secret handling in the user environment.

High

references/rollinggo-npx.md:69

Generic API/secret keys

解析顺序:`--api-key` 参数 → `RollingGo_API_KEY` 环境变量。

The skill intentionally uses RollingGo_API_KEY as a credential for a third-party CLI and API. This is expected behavior, but it is real secret handling in the user environment.

High

references/rollinggo-npx.md:73

Generic API/secret keys

export RollingGo_API_KEY="YOUR_API_KEY"

The skill intentionally uses RollingGo_API_KEY as a credential for a third-party CLI and API. This is expected behavior, but it is real secret handling in the user environment.

High

references/rollinggo-npx.md:76

Generic API/secret keys

$env:RollingGo_API_KEY="YOUR_API_KEY"

The skill intentionally uses RollingGo_API_KEY as a credential for a third-party CLI and API. This is expected behavior, but it is real secret handling in the user environment.

High

references/rollinggo-npx.md:79

Generic API/secret keys

rollinggo hotel-tags --api-key YOUR_API_KEY

This line documents passing an API key on the command line, which can expose secrets through shell history or process listings. The example uses placeholders, but the usage pattern is real.

High

references/rollinggo-npx.md:82

Generic API/secret keys

宿主经常丢失 `RollingGo_API_KEY` 时,见 [claw-host-env.md](claw-host-env.md)。

The skill intentionally uses RollingGo_API_KEY as a credential for a third-party CLI and API. This is expected behavior, but it is real secret handling in the user environment.

High

references/rollinggo-npx.md:145

Generic API/secret keys

rollinggo hotel-tags --api-key YOUR_API_KEY

This line documents passing an API key on the command line, which can expose secrets through shell history or process listings. The example uses placeholders, but the usage pattern is real.

High

references/rollinggo-npx.md:188

Generic API/secret keys

- **缺少 API Key 报错:** 传入 `--api-key`、设置 `RollingGo_API_KEY`,或者如果你跑在任何 claw 风格宿主里,就按 [claw-host-env.md

The skill intentionally uses RollingGo_API_KEY as a credential for a third-party CLI and API. This is expected behavior, but it is real secret handling in the user environment.

High

references/rollinggo-uv.md:70

Generic API/secret keys

解析顺序:`--api-key` 参数 → `RollingGo_API_KEY` 环境变量。

The skill intentionally uses RollingGo_API_KEY as a credential for a third-party CLI and API. This is expected behavior, but it is real secret handling in the user environment.

High

references/rollinggo-uv.md:74

Generic API/secret keys

export RollingGo_API_KEY="YOUR_API_KEY"

The skill intentionally uses RollingGo_API_KEY as a credential for a third-party CLI and API. This is expected behavior, but it is real secret handling in the user environment.

High

references/rollinggo-uv.md:77

Generic API/secret keys

$env:RollingGo_API_KEY="YOUR_API_KEY"

The skill intentionally uses RollingGo_API_KEY as a credential for a third-party CLI and API. This is expected behavior, but it is real secret handling in the user environment.

High

references/rollinggo-uv.md:80

Generic API/secret keys

rollinggo hotel-tags --api-key YOUR_API_KEY

This line documents passing an API key on the command line, which can expose secrets through shell history or process listings. The example uses placeholders, but the usage pattern is real.

High

references/rollinggo-uv.md:83

Generic API/secret keys

宿主经常丢失 `RollingGo_API_KEY` 时,见 [claw-host-env.md](claw-host-env.md)。

The skill intentionally uses RollingGo_API_KEY as a credential for a third-party CLI and API. This is expected behavior, but it is real secret handling in the user environment.

High

references/rollinggo-uv.md:146

Generic API/secret keys

rollinggo hotel-tags --api-key YOUR_API_KEY

This line documents passing an API key on the command line, which can expose secrets through shell history or process listings. The example uses placeholders, but the usage pattern is real.

High

references/rollinggo-uv.md:192

Generic API/secret keys

- **缺少 API Key 报错:** 传入 `--api-key`、设置 `RollingGo_API_KEY`,或者如果你跑在任何 claw 风格宿主里,就按 [claw-host-env.md

The skill intentionally uses RollingGo_API_KEY as a credential for a third-party CLI and API. This is expected behavior, but it is real secret handling in the user environment.

High

SKILL.md:10

Generic API/secret keys

"primaryEnv": "RollingGo_API_KEY",

The skill intentionally uses RollingGo_API_KEY as a credential for a third-party CLI and API. This is expected behavior, but it is real secret handling in the user environment.

High

SKILL.md:13

Generic API/secret keys

"env": ["RollingGo_API_KEY"]

The skill intentionally uses RollingGo_API_KEY as a credential for a third-party CLI and API. This is expected behavior, but it is real secret handling in the user environment.

High

SKILL.md:45

Generic API/secret keys

解析顺序:`--api-key` 参数 → `RollingGo_API_KEY` 环境变量。

The skill intentionally uses RollingGo_API_KEY as a credential for a third-party CLI and API. This is expected behavior, but it is real secret handling in the user environment.

Medium

references/claw-host-env.md:31

Hidden file access

或写入宿主的 `.env` 文件:`~/.openclaw/.env`(macOS/Linux)/ `%USERPROFILE%\.openclaw\.env`(Windows)。

The documentation recommends storing or injecting the API key in host or sandbox configuration. This can persist secrets and broaden exposure if the configuration is shared.

Medium

SKILL.md:57

Ruby/shell backtick execution

- **npm/npx:** `npx --yes --package rollinggo@latest rollinggo ...`

This instruction causes the agent or user to run RollingGo through npm, uv, or the installed CLI. Running third-party CLI code is intended, but it is a real external command execution path.

Medium

SKILL.md:58

Ruby/shell backtick execution

- **uvx:** `uvx --refresh --from rollinggo@latest rollinggo ...`

This instruction causes the agent or user to run RollingGo through npm, uv, or the installed CLI. Running third-party CLI code is intended, but it is a real external command execution path.

Medium

SKILL.md:62

Ruby/shell backtick execution

- **npm 全局:** `npm install -g rollinggo@latest`

This instruction causes the agent or user to run RollingGo through npm, uv, or the installed CLI. Running third-party CLI code is intended, but it is a real external command execution path.

Medium

SKILL.md:63

Ruby/shell backtick execution

- **uv 工具:** `uv tool upgrade rollinggo@latest`

This instruction causes the agent or user to run RollingGo through npm, uv, or the installed CLI. Running third-party CLI code is intended, but it is a real external command execution path.

Medium

SKILL.md:70

Ruby/shell backtick execution

2. 如果需要标签筛选 → 先执行 `hotel-tags` 获取有效标签字符串

This instruction causes the agent or user to run RollingGo through npm, uv, or the installed CLI. Running third-party CLI code is intended, but it is a real external command execution path.

Medium

SKILL.md:71

Ruby/shell backtick execution

3. 执行 `search-hotels` → 解析 JSON → 提取 `hotelId`

This instruction causes the agent or user to run RollingGo through npm, uv, or the installed CLI. Running third-party CLI code is intended, but it is a real external command execution path.

Medium

SKILL.md:72

Ruby/shell backtick execution

4. 执行 `hotel-detail --hotel-id <id>` 查询房型和价格

This instruction causes the agent or user to run RollingGo through npm, uv, or the installed CLI. Running third-party CLI code is intended, but it is a real external command execution path.

Medium

SKILL.md:77-97

Ruby/shell backtick execution

```bash

This instruction causes the agent or user to run RollingGo through npm, uv, or the installed CLI. Running third-party CLI code is intended, but it is a real external command execution path.

Medium

SKILL.md:101

Ruby/shell backtick execution

- `--place-type` 必须使用 `rollinggo search-hotels --help` 里显示的精确值

This instruction causes the agent or user to run RollingGo through npm, uv, or the installed CLI. Running third-party CLI code is intended, but it is a real external command execution path.

Risk Factors

📁 Filesystem access (2)

references/claw-host-env.md:31 references/claw-host-env.md:31

🔑 Env variables (21)

⚙️ External commands (21)

🌐 Network access (2)

SKILL.md:4 SKILL.md:47

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/rollinggo-ai-rollinggo-searchhotel/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/rollinggo-ai-rollinggo-searchhotel/security.svg)](https://skillstore.io/skills/rollinggo-ai-rollinggo-searchhotel?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/rollinggo-ai-rollinggo-searchhotel?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/rollinggo-ai-rollinggo-searchhotel/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/rollinggo-ai-rollinggo-searchhotel.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

RollingGo-AI. (2026). rollinggo-searchhotel security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/rollinggo-ai-rollinggo-searchhotel/audits/4

BibTeX citation

@techreport{rollinggo-ai-rollinggo-ai-rollinggo-searchhotel-2026,
  author = {RollingGo-AI},
  title = {rollinggo-searchhotel security audit report (audit version 4)},
  institution = {Skillstore},
  year = {2026},
  number = {4},
  url = {https://skillstore.io/skills/rollinggo-ai-rollinggo-searchhotel/audits/4},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "rollinggo-searchhotel security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
  - name: "RollingGo-AI"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/rollinggo-ai-rollinggo-searchhotel/audits/4"
identifiers:
  - type: other
    value: "skillstore:rollinggo-ai-rollinggo-searchhotel:audit:4"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Find Family Hotels Near Attractions

Search hotels near a landmark with dates, guest counts, budget, and family-friendly tags.

Compare Room Prices Before Booking

Fetch hotel details and room prices for selected hotel IDs before sharing booking links.

Build Filtered Hotel Shortlists

Use tags, brands, distance, and star ratings to create a focused shortlist for a trip.

Try These Prompts

Basic Hotel Search

Search for hotels near Tokyo Disney Resort for two adults from April 1 to April 3, 2026. Show five good options.

Budget And Star Filter

Find hotels near Shanghai Disney for two nights under 800 CNY per night. Limit results to four and five star hotels.

Tag Based Family Search

Get the available hotel tags, then search Tokyo Disney hotels that are family friendly and include breakfast.

Detailed Hotel Comparison

Search for three hotels near the Bund in Shanghai, inspect room details for each hotel ID, and compare price, room type, and cancellation policy.

Best Practices

Confirm destination, dates, guests, rooms, and budget before searching.
Use hotel IDs from search results when requesting room details.
Store the RollingGo API key in a scoped secret configuration.

Avoid

Do not use this skill for flights, trains, transfers, or rental cars.
Do not pass real API keys directly in prompts or visible command text.
Do not rely on hotel names when a hotel ID is available.

Frequently Asked Questions

What does this skill search?

It searches hotels through the RollingGo CLI and can retrieve hotel details, tags, room prices, and booking links.

Does it require an API key?

Yes. The RollingGo CLI needs a RollingGo API key through a scoped environment variable or another supported secret source.

Can it complete a booking?

No. It can return booking URLs or hotel detail links, but the user completes payment outside the skill.

Can it filter by hotel tags?

Yes. It can fetch valid tags and use them as preferred, required, or excluded hotel filters.

Which AI tools can use it?

The report lists support for Claude, Codex, and Claude Code.

What should users verify before booking?

Users should verify price, dates, room type, cancellation policy, taxes, fees, and booking site terms.

Developer Details

Author

RollingGo-AI

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/RollingGo-AI/rollinggo-skills/tree/main/rollinggo-hotel-cn/

Ref

62e2a730c5cd74eab4c7164309d810de660fcea3

Maintenance freshness

7/18/2026

Usage

2 downloads · 67 views

File structure

📁 references/

📄 claw-host-env.md

📄 rollinggo-npx.md

📄 rollinggo-uv.md

📄 SKILL.md

More from RollingGo-AI

View all

📦

hotel-core

Migrate from the deprecated hotel-core skill

The old hotel-core skill no longer provides booking functions. This skill gives a clear path to install the replacement hotel booking skill.

Productivity View

📦

rollinggo-hotel-booking

Find and book hotels with RollingGo

Finding suitable hotels and comparing room options can take time. This skill searches hotel inventory, presents options, and guides users through a confirmed booking workflow.

Productivity View

View all

📦

pricewin-hotel-search

Compare Live Hotel Prices Across Four Sources

by price-win

Comparing hotel prices across several booking sites is slow and inconsistent. This skill searches live sources and presents the cheapest dated options in one view.

Research & Learning View

📦

linear-projects-write

Create and Update Linear Projects from the CLI

by Bind

Managing Linear projects through the web interface is slow when you work in the terminal or automate workflows. This skill lets you create and update projects with simple commands, so you can manage project data directly from scripts and the command line.

Productivity View

📦

gws-gmail

Manage Gmail with Google Workspace CLI

by googleworkspace

Managing Gmail through API commands requires accurate resource names and parameters. This skill guides Claude and Codex through supported Gmail CLI workflows.

Communication View

📦

web-cli-teleport

Choose Claude Code Web or CLI

by DNYoussef

Teams lose time when they pick the wrong Claude Code interface for a task. This skill recommends Web, CLI, or a hybrid handoff workflow.

Productivity View

📦

gws-shared

Use Google Workspace CLI Safely

by googleworkspace

Google Workspace CLI tasks can fail because authentication, flags, and shell quoting vary. This skill provides shared patterns for reliable and safer gws commands.

Office & Reports View

📦

enact-hello-python

Run a Python Greeting Example

by EnactProtocol

New Enact users need a small example that proves tool execution works. This skill runs a Python greeting command and returns simple runtime output.

Coding & Development View

rollinggo-searchhotel

Install with my Agent

Agent-readable resources

Test it

Security Audit

Confirmed security concerns (5)

Risk Factors

Copy report link

Markdown badge

HTML badge

Embed card

APA citation

BibTeX citation

CITATION.cff

Skillstore Score

What You Can Build

Find Family Hotels Near Attractions

Compare Room Prices Before Booking

Build Filtered Hotel Shortlists

Try These Prompts

Best Practices

Avoid

Frequently Asked Questions

Developer Details

More from RollingGo-AI

hotel-core

rollinggo-hotel-booking

Related Skills

pricewin-hotel-search

linear-projects-write

gws-gmail

web-cli-teleport

gws-shared

enact-hello-python