wheretocredit
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to fetch airline earning data from wheretocredit.com. This is a well-known service for frequent flyer information and the network operations are limited to data retrieval required for the skill's primary functionality.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external web pages to perform mileage calculations. While this presents an ingestion surface for untrusted content, the skill uses the data exclusively for structured calculations and table extraction, and it lacks dangerous capabilities (such as code execution or file system writes) that could be exploited by malicious content in the fetched data.
Audit Metadata