american-airlines
Warn
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFEDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script implements a 2FA retrieval hook via the
AA_2FA_COMMANDenvironment variable. When this variable is set, the script executes the provided string as a shell command to programmatically obtain the verification code. - [DYNAMIC_EXECUTION]: The command hook in
scripts/check_balance.pyusessubprocess.runwithshell=True. This allows for arbitrary shell execution of whatever content is provided in the environment variable, which could lead to command injection if the environment is not strictly controlled. - [EXTERNAL_DOWNLOADS]: The skill requires the installation of
patchright(a browser automation library) and pulls a Docker image (ghcr.io/borski/aa-miles-check) for execution. These resources are provided by the skill author. - [CREDENTIALS_UNSAFE]: The skill stores authenticated browser sessions, including cookies and access tokens, in persistent profiles located at
~/.aa-browser-profiles/. While this is intended to skip 2FA on subsequent runs, these files contain sensitive authentication data.
Audit Metadata