The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill installs the fast-flights Python package from the public registry (PyPI) at runtime to a local cache directory (~/.cache/k-skill/flight-ticket-search/venv).
[COMMAND_EXECUTION]: The helper script scripts/flight_ticket_search.py uses subprocess.check_call to create Python virtual environments and execute pip for dependency management.
[DYNAMIC_EXECUTION]: The helper script uses os.execve to perform process replacement, restarting itself within the created virtual environment to ensure the correct dependencies are loaded.
[INDIRECT_PROMPT_INJECTION]: The skill processes external flight data from Google Flights which could theoretically contain malicious instructions.
Ingestion points: Data is fetched from the Google Flights public surface via the fast-flights library in scripts/flight_ticket_search.py.
Boundary markers: Absent; flight data is processed and presented to the agent without explicit security delimiters.
Capability inventory: The script has the ability to execute subprocesses (for environment setup), perform process replacement, and write to the local file system (~/.cache).
Sanitization: The script performs basic validation on airport codes (3-letter IATA check) and uses regular expressions to extract numeric digits from price strings.

flight-ticket-search