status-match
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a pure reference tool for travel loyalty programs. It provides informational content regarding airline and hotel status matching rules.
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to performjqqueries against a local data file (data/status-match.json). These queries are restricted to standard JSON processing and do not involve shell injection, network access, or modification of the host environment. - [DATA_EXPOSURE]: No sensitive file paths, hardcoded credentials, or data exfiltration patterns were identified. The network references are limited to informational travel websites and official program domains.
- [INDIRECT_PROMPT_INJECTION]: The skill processes structured data from a local JSON file. While this represents a data ingestion surface, the use of
jqfor extraction and the context of travel rules do not present a viable indirect injection vector.
Audit Metadata