hotel-core

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). These URLs point to direct executable downloads from a small/unknown GitHub repo (RollingGo-AI) plus a non-official domain (rollinggo.store) used for OAuth — direct .exe/.bin downloads and custom auth endpoints from unvetted sources are common malware delivery vectors, so treat as suspicious until you verify the repo, release signatures/checksums, and domain legitimacy.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The install script (scripts/install.py) and README invoke remote fetches that are used to obtain and run the required CLI: it queries the GitHub API at https://api.github.com/repos/RollingGo-AI/oauth-hotel-cli/releases/latest and downloads binaries from URLs such as https://github.com/RollingGo-AI/oauth-hotel-cli/releases/latest/download/rgh-linux (and the win/macos variants), and the README also suggests "npm install -g @rollinggo/hotel@latest" — these fetch remote executable code that the skill depends on and which will be executed as part of normal operation.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). 该 Skill 明确包含用于实际消费和下单的专用接口与流程：包含 price-confirm（锁价并返回 referenceNo）、book（创建订单）等专门命令，并且会从下单结果中提取 alipayUrl 或其他支付链接返回给用户。Skill 描述的工作流程会生成真实订单号、锁定价格并引导用户通过支付网关（如 Alipay）完成付款，属于专门为真实金钱交易（酒店预订与支付）设计的能力。因此它具备对接支付网关/下单并触发实际消费的明确执行能力，应判定为有直接金融执行权限。