foresttrip-vacancy
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads and executes the vendor's own CLI tool (
@nomadamas/k-skill) vianpxto fetch instructions and run helper scripts. It also requires the installation of theplaywrightlibrary, which is a standard industry tool for browser automation. - [COMMAND_EXECUTION]: Shell commands are used to install necessary Python dependencies and execute the lookup script. These commands are transparently documented in the skill instructions and are scoped to the skill's primary function.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from an external government reservation service.
- Ingestion points: Fetches availability data from official JSON endpoints at
foresttrip.go.krvia therun_foresttrip_vacancy.pyscript. - Boundary markers: The script employs structured JSON parsing and specific business logic to filter out internal management rooms (marked as "reserve" rooms) and duplicate entries.
- Capability inventory: The skill has network access to the target reservation service and file-writing capabilities to manage a local session cache (
~/.cache/k-skill/foresttrip-vacancy/session.json). - Sanitization: Ingested data is strictly parsed as JSON and normalized before being output as text or structured JSON for the user, reducing the risk of processing malicious injected instructions.
Audit Metadata