seatmaps
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill uses a browser automation tool to fetch data from well-known travel industry websites. No malicious patterns, data exfiltration, or unauthorized command executions were found.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external web pages (SeatMaps.com, AeroLOPA) using
agent-browser snapshot. While this creates an ingestion surface for potential instructions in the web content, the sources are specialized and the available capabilities are restricted to browser navigation and data reporting. No specific sanitization or boundary markers are defined for the ingested text. - [EXTERNAL_DOWNLOADS]: The documentation instructs the user to install the
agent-browserpackage from a legitimate registry (npm). This is a standard tool for the agent's environment and the installation method is standard practice.
Audit Metadata