travel-research
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill workflow in
SKILL.mdrequires the agent to "Pull live or current data when the request depends on timing-sensitive facts" from sources such as "available public search results", "reliable climate or weather sources", and "current travel sources". While these are functional requirements for travel research, they involve processing untrusted external content from the open web. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface (Category 8). It instructs the agent to ingest and process data from external public sources (flight pricing, weather, crowd levels) without specifying sanitization methods or using boundary markers (like XML tags or delimiters) to isolate this untrusted content. This could allow malicious instructions embedded in a travel website or weather source to influence the agent's behavior during the research process.
Audit Metadata