rapidapi

Pass

Audited by Gen Agent Trust Hub on Oct 11, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses standard curl commands to perform network requests to RapidAPI endpoints. These commands are used for legitimate data retrieval purposes.
  • [EXTERNAL_DOWNLOADS]: The skill fetches real-time flight and hotel availability data from rapidapi.com subdomains. These are well-known service endpoints used for travel search functionality.
  • [INDIRECT_PROMPT_INJECTION]: The skill exhibits a standard data ingestion surface by processing external API responses from travel scrapers.
  • Ingestion points: External API responses from google-flights-live-api and booking-live-api (SKILL.md).
  • Boundary markers: None explicitly defined in the provided examples.
  • Capability inventory: Uses curl for network requests and jq for data parsing.
  • Sanitization: Employs jq to structure and filter the raw API output before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 11, 2026, 08:31 AM