hotel-core
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the 'rgh' CLI binary from the vendor's official GitHub repository (RollingGo-AI/oauth-hotel-cli) and manages the installation of the '@rollinggo/hotel' package from the NPM registry. These resources are maintained by the skill's author to support its core functionality.
- [COMMAND_EXECUTION]: The 'scripts/install.py' script executes environment validation and installation commands (such as 'npm install' and 'node --version') using the 'subprocess' module. It also adjusts file permissions using 'os.chmod' to ensure the downloaded binary is executable within the skill's local directory.
Audit Metadata