hotel-core

该技能的业务目的与酒店预订能力基本一致，但其核心执行依赖外部 rgh CLI，且提供通过脚本/二进制自动下载安装与强制升级路径。由于不可验证二进制还负责 OAuth Token 和预订数据处理，风险主要来自供应链与凭证转发，而非明显恶意窃取；整体应判为 SUSPICIOUS。

No direct malware behaviors (e.g., exfiltration, backdoor installation, eval-based execution) are present in this fragment. However, it performs high-risk supply-chain actions: installs a global npm package using an unpinned '@latest' version (which may trigger install lifecycle scripts) and downloads a remote executable binary from GitHub Releases without any integrity verification, then marks it executable. These patterns warrant security review, pinning, and artifact verification.