Car Rental
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and analyze data from various external car rental and travel aggregator websites (e.g., Kayak, Hertz, Rentalcars.com). This processing of untrusted web content creates a surface for indirect prompt injection, where an attacker could embed malicious instructions in a webpage to influence the agent's behavior. The skill also stores the results of these searches in a local directory (
~/Clawic/data/car-rental/), which could potentially persist poisoned data across sessions. - Ingestion points: Publicly accessible car rental websites, price aggregators, and subscription service pages.
- Boundary markers: The instructions do not define specific delimiters or "ignore instructions" warnings to separate retrieved web data from the agent's internal logic.
- Capability inventory: The skill possesses file-system write capabilities to a dedicated local directory for managing memory, search configurations, and history snapshots.
- Sanitization: No methods for sanitizing, escaping, or validating the content retrieved from external sites are specified in the instructions.
Audit Metadata