china-travel-guide
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE]: The skill uses web search capabilities to fetch travel data from external sources, including official tourism sites and local Chinese platforms like Mafengwo, Xiaohongshu, and Dianping. This network activity is consistent with the skill's primary purpose of gathering up-to-date travel information.
- [PROMPT_INJECTION]: The skill possesses a potential surface for indirect prompt injection because it incorporates external data from web searches and user responses into the generated HTML output.
- Ingestion points: User-provided travel preferences and results from automated web searches (SKILL.md).
- Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands in the fetched web content.
- Capability inventory: The agent is instructed to perform web searches and write files to the local system (SKILL.md).
- Sanitization: No specific sanitization or escaping logic is mandated for the external data before it is rendered in the HTML document.
Audit Metadata