myrealtrip-search
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
npxcommands inSKILL.mdandinstruction.mdto manage skill lifecycle and execute the local Python wrapper. These are standard operations for the k-skill framework. - [EXTERNAL_DOWNLOADS]: The instructions direct the user to install the
mcpPython package from PyPI viapip install mcp. This is a well-known, official SDK for the Model Context Protocol. - [DYNAMIC_EXECUTION]: The script
scripts/myrealtrip_mcp.pyusesimportlib.import_moduleto dynamically load themcplibrary. This is implemented to handle version compatibility between MCP SDK 1.x and 2.x, ensuring the skill works across different environment setups. - [COMMAND_EXECUTION]: The Python wrapper executes network requests to the official MyRealTrip MCP endpoint (
https://mcp-servers.myrealtrip.com/mcp) using the established MCP HTTP transport. No sensitive local file access or exfiltration patterns were detected.
Audit Metadata