booking-best-price
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the Firecrawl MCP server for scraping content from rental websites. It provides instructions to install it via
claude mcp addfromhttps://mcp.firecrawl.devor usingnpx -y firecrawl-mcp. Firecrawl is a well-known service for web scraping.\n- [PROMPT_INJECTION]: The skill ingests data from external rental listings, creating a surface for indirect prompt injection.\n - Ingestion points: Scraped content from Airbnb, Vrbo, Booking.com, and other platforms (SKILL.md).\n
- Boundary markers: No specific delimiters are used to separate scraped content from agent instructions.\n
- Capability inventory: The skill uses web scraping and search tools.\n
- Sanitization: No explicit sanitization of scraped text is performed. This risk is inherent to the skill's primary purpose and is considered minimal.
Audit Metadata