Atlas / Skills / borski / Hotel Chains

Hotel ChainsCAUTION

skills/borski/hotel-chains

AI-powered travel hacking and search with cash, points, miles, and award flights. Drop-in skills and MCP servers for Claude, Codex, and OpenCode.

Verdict
CAUTION
Grade
B
Trust score
89 /100
Version
—
Hosts
—
License
MIT
Stars
693
01

Overview

AI-powered travel hacking and search with cash, points, miles, and award flights. Drop-in skills and MCP servers for Claude, Codex, and OpenCode.

Read from source at commit fda58ab480fdOBSERVED · 2026-10-14
Advertisement
02

What it tells the agent

The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.

---
name: hotel-chains
description: Maps hotel brand names (Westin, Sheraton, Holiday Inn, etc.) to chain families and loyalty programs. Use when hotel results contain branded properties or deciding whether to check award rates.
category: reference
summary: Maps brand names (Westin, Holiday Inn, etc.) to chain families and loyalty programs.
---

# Hotel Chain Recognition

**Reference data:** `data/hotel-chains.json`

Use the `quick_lookup` section in the data file to instantly identify which loyalty program a hotel belongs to when it appears in search results. When you see "Westin" you need to know that's Marriott Bonvoy. When you see "The Standard" you need to know that's Hyatt.

## The Trigger Table

When results contain properties from ANY of these chains, IMMEDIATELY pull AwardWallet balances and check award rates. No judgment call. No asking. Just do it.

| Chain Family | Properties Include | Loyalty Program |
|---|---|---|
| IHG | Holiday Inn, InterContinental, Crowne Plaza, Kimpton, Staybridge, Candlewood | IHG One Rewards |
| Marriott | Marriott, Sheraton, Westin, W, Ritz-Carlton, St. Regis, Courtyard, Aloft | Marriott Bonvoy |
| Hilton | Hilton, DoubleTree, Hampton, Embassy Suites, Waldorf Astoria, Conrad, Curio | Hilton Honors |
| Hyatt | Hyatt, Grand Hyatt, Park Hyatt, Andaz, Thompson, Alila, Hyatt Place | World of Hyatt |
| Accor | Sofitel, Novotel, Pullman, Fairmont, Raffles, Swissôtel, ibis, Mercure | Accor Live Limitless |
| Radisson | Radisson, Radisson Blu, Park Inn, Country Inn | Radisson Rewards |
| Wyndham | Wyndham, Ramada, Days Inn, Super 8, La Quinta, Tryp | Wyndham Rewards |
| Best Western | Best Western, Best Western Plus, Best Western Premier, SureStay | Best Western Rewards |

## Always Compare Points vs Cash for Hotels

- Hyatt points: 1.4cpp VFTW floor / 1.5cpp UP/OMAAT median / 1.7cpp TPG ceiling. Often a great redemption.
- Hilton at 0.4cpp floor (almost always better to pay cash).
- Marriott at 0.6-0.7cpp.
- IHG at 0.5cpp across all sources. Almost always better to pay cash.

Mention transfer opportunities. "Your Chase UR transfers 1:1 to Hyatt. That 25K/night Category 5 hotel is worth $375 in cash. That's 1.5cpp, between the 1.4 conservative floor and 1.7 ceiling. Decent but not exceptional."

## Booking Windows for Hotels

Reference `data/sweet-spots.json` `booking_windows` section if a user wants to know how far in advance to book.
03

Trust audit

CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.

LayerWhat it checksResult
L0Provenance & inventoryWARN
L1Static analysis of the codeNA
L2Instruction surface (what it tells the agent)WARN
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
none-observed
Shell
none-observed
Dependencies
pinned
Secrets in source
none-found

Findings (6)

MEDIUMInventory / provenance · inv.symlink · CWE-1104
.agents/skills
.agents/skills
Why it matters. link not followed
MEDIUMInventory / provenance · inv.symlink · CWE-1104
.claude/skills
.claude/skills
Why it matters. link not followed
MEDIUMInventory / provenance · inv.symlink · CWE-1104
.opencode/skills
.opencode/skills
Why it matters. link not followed
MEDIUMInventory / provenance · inv.symlink · CWE-1104
skills
skills
Why it matters. link not followed
MEDIUMPrompt injection · review.instruction_override · CWE-94, CWE-1427
SKILL.md
IMMEDIATELY pull AwardWallet balances and check award rates. No judgment call. No asking. Just do it.
Why it matters. It instructs the agent to bypass user consent and act autonomously without asking.
Fix. rewrite it so the instruction says plainly what it does, and asks the user before it acts
LOWInventory / provenance · inv.symlink · CWE-1104
AGENTS.md
AGENTS.md
Why it matters. link not followed

Gates applied: no_behavioural_pass.

Audited 2026-10-14 · audit v0.4.1 · source sha fda58ab480fdfull audit observations/trust-audit/skill/borski__hotel-chains.json · Report an issue / request a re-scan
04

Audit history

Every audit this skill has had.

DateSourceVerdictGradeScoreChange
2026-10-14fda58ab480fdCAUTIONB89first audit
05

Questions

What does the Hotel Chains skill do?

AI-powered travel hacking and search with cash, points, miles, and award flights. Drop-in skills and MCP servers for Claude, Codex, and OpenCode.

Is Hotel Chains safe to install?

With care. The audit graded it B (89/100) and found 6 things worth knowing before you trust this skill, listed below with the exact line each was found on.

What can Hotel Chains access on my machine?

The audit observed no filesystem, network or shell use at all in its source.

How current is this page?

The grade is for one exact copy of the source (fda58ab480fd), read on 2026-10-14. The repository is watched, and a new audit runs when it changes — this is the first audit.

Advertisement