flight-ticket-search
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
flight_ticket_search.pyscript utilizessubprocess.check_callto create a virtual environment (venv) and install Python dependencies usingpip. - [EXTERNAL_DOWNLOADS]: The skill downloads the
fast-flightspackage from PyPI. Additionally, it instructs the agent to usenpxto fetch and execute utility scripts from the author's npm namespace (@nomadamas). - [DYNAMIC_EXECUTION]: The script uses
os.execveto replace the current process with a new instance running inside the freshly created virtual environment to ensure dependency availability. - [REMOTE_CODE_EXECUTION]: The script installs the
fast-flightslibrary from PyPI and imports it at runtime, which involves the execution of externally sourced code.
Audit Metadata