hotel-all-in-one
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The installation script (
scripts/install.py) downloads a standalone executable binary directly from the developer's official GitHub repository (RollingGo-AI/oauth-hotel-cli-overseas). - [EXTERNAL_DOWNLOADS]: The skill attempts to install the '@rollinggo/hotel-global' package from the public NPM registry as the preferred installation method.
- [COMMAND_EXECUTION]: The Python installation script uses
subprocess.runto verify the local environment (checking for Node.js and NPM) and to execute the package installation command. - [COMMAND_EXECUTION]: The skill uses
os.chmodto grant execution permissions to the downloaded CLI binary on Unix-based systems (macOS and Linux), which is standard for binary installations. - [DATA_EXFILTRATION]: The skill uses an OAuth-based login flow (
rgg login) to authenticate users; the resulting authorization link is provided to the user for manual interaction, which is a secure and standard practice for third-party integrations.
Audit Metadata