flight-search-strategy
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes a Docker image hosted on the GitHub Container Registry (ghcr.io/borski/sw-fares) to perform Southwest Airlines fare searches. This resource is provided by the vendor and is used for its intended search purpose.\n- [COMMAND_EXECUTION]: The search workflow includes shell commands for executing Docker containers and Python scripts to interface with flight data sources.\n- [INDIRECT_PROMPT_INJECTION]: The skill acts as an ingestion point for data from multiple external flight search APIs, creating a surface for indirect prompt injection.\n
- Ingestion points: Flight search result data retrieved from Duffel, Ignav, Google Flights, Skiplagged, Kiwi, Seats.aero, and SerpAPI (SKILL.md).\n
- Boundary markers: The instructions do not specify the use of delimiters or specific safety markers for processing external flight data.\n
- Capability inventory: The skill utilizes shell execution via Docker and Python as core components of its search strategy.\n
- Sanitization: No explicit procedures for the sanitization or validation of aggregated external flight data were identified in the instructions.
Audit Metadata