oebb-scotty
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill hardcodes an authentication identifier (
aid: OWDL4fE4ixNiPBBm) in both the documentation and the associated shell scripts. This identifier is necessary for the ÖBB (Austrian Federal Railways) API to function, but hardcoding authentication tokens is a poor security practice.\n- [INDIRECT_PROMPT_INJECTION]: Several shell scripts (arrivals.sh,departures.sh,search-station.sh, andtrip.sh) take user input and place it directly into raw JSON payloads sent viacurl. Because the input is not sanitized or JSON-escaped, an attacker could provide station names or queries containing double quotes and commas to manipulate the structure of the API request (JSON Injection). This surface could be used to alter the parameters of the tool calls initiated by the agent.\n - Ingestion points: Script arguments (station names, queries) in
arrivals.sh,departures.sh,search-station.sh, andtrip.sh.\n - Boundary markers: None.\n
- Capability inventory: Outbound
curlnetwork requests to the ÖBB HAFAS API.\n - Sanitization: None; input is placed directly into JSON string templates.
Audit Metadata