tripadvisor
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The automated scanner flagged commands that pipe API responses to
python3 -m json.tool. This is a false positive;json.toolis a standard Python library module used for pretty-printing JSON data and does not execute the content as code. The target domainapi.content.tripadvisor.comis the official API endpoint.- [CREDENTIALS_UNSAFE]: The skill demonstrates security best practices by instructing users to manage API keys through environment variables and a.envfile instead of hardcoding them into scripts.- [EXTERNAL_DOWNLOADS]: The use ofifconfig.meis documented to assist users in identifying their public IP address for TripAdvisor's required whitelisting process. This is a common and safe developer practice for configuring API access.
Audit Metadata