express-bus-booking
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto fetch and run the author's own@nomadamas/k-skillpackage for managing skill instructions and scripts. - [COMMAND_EXECUTION]: Shell commands are used to invoke the vendor's CLI tool for fetching updated instructions and executing the Python booking helper.
- [DYNAMIC_EXECUTION]: The helper script
scripts/kobus_express_booking.pygenerates a temporary HTML file containing a JavaScript-based auto-submit form that aids the user in reaching the official KOBUS checkout page. - [REMOTE_CODE_EXECUTION]: The skill relies on the remote delivery of instructions and script execution wrappers via the vendor's CLI package.
- [INDIRECT_PROMPT_INJECTION]: The skill extracts bus schedule and fare information from the live KOBUS website, creating an ingestion surface for third-party data.
- Ingestion points: Timetable and seat availability data are retrieved via HTTP POST requests in
scripts/kobus_express_booking.py. - Boundary markers: The instructions require explicit user confirmation before any sensitive step, like opening the payment page.
- Capability inventory: The skill possesses network capabilities (to access KOBUS) and file-writing capabilities (to save hold details and helper files).
- Sanitization: The Python script cleans retrieved HTML data using
html.escapeand regular-expression-based tag stripping before processing.
Audit Metadata