gardening
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFEDATA_EXFILTRATIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DATA_EXFILTRATION]: The skill reads personal travel information including trip names, confirmation codes, passenger counts, and travel notes from user-supplied local files and transmits this data to various third-party travel platforms and APIs (such as Skiplagged, Seats.aero, Duffel, and AwardWallet) to check for pricing and availability updates.- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by ingesting and parsing untrusted data from user-provided files.
- Ingestion points: User-specified file paths for travel reservations (e.g.,
~/trips/reservations.json). - Boundary markers: None present; the skill treats all content within the provided files as data to be parsed and acted upon.
- Capability inventory: Ability to read local files and execute network requests to multiple external travel APIs.
- Sanitization: No evidence of sanitization or validation of the input file content prior to processing.- [EXTERNAL_DOWNLOADS]: The skill interacts with numerous well-known external travel services and aggregators, including Google Flights, Kiwi, Trivago, Seats.aero, and AwardWallet, to retrieve real-time pricing and schedule information.
Audit Metadata