foresttrip-vacancy

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads and executes the vendor's own CLI tool (@nomadamas/k-skill) via npx to fetch instructions and run helper scripts. It also requires the installation of the playwright library, which is a standard industry tool for browser automation.
  • [COMMAND_EXECUTION]: Shell commands are used to install necessary Python dependencies and execute the lookup script. These commands are transparently documented in the skill instructions and are scoped to the skill's primary function.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from an external government reservation service.
  • Ingestion points: Fetches availability data from official JSON endpoints at foresttrip.go.kr via the run_foresttrip_vacancy.py script.
  • Boundary markers: The script employs structured JSON parsing and specific business logic to filter out internal management rooms (marked as "reserve" rooms) and duplicate entries.
  • Capability inventory: The skill has network access to the target reservation service and file-writing capabilities to manage a local session cache (~/.cache/k-skill/foresttrip-vacancy/session.json).
  • Sanitization: Ingested data is strictly parsed as JSON and normalized before being output as text or structured JSON for the user, reducing the risk of processing malicious injected instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 02:30 PM