southwest
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes Python scripts (
search_fares.py,check_change.py,monitor.py) and Docker containers to perform browser automation tasks. - [EXTERNAL_DOWNLOADS]: Fetches the
patchrightpackage and browser binaries during installation, and pulls Docker images from the vendor's repository atghcr.io/borski/to facilitate background operation. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the Southwest Airlines website at runtime across its primary scripts. While it uses regular expressions for structured data extraction, there are no explicit boundary markers to prevent potentially malicious instructions embedded in web content from influencing the agent's context.
- Ingestion points: Flight results and account information pages on
southwest.com(processed insearch_fares.py,check_change.py, andmonitor.py). - Boundary markers: Not present; the agent processes the raw extracted text from the site.
- Capability inventory: Subprocess execution for Python/Docker and network access through browser automation.
- Sanitization: Employs regex-based parsing for specific fields like flight numbers and prices, providing some inherent structure to the external data.
Audit Metadata