myrealtrip-search

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses npx commands in SKILL.md and instruction.md to manage skill lifecycle and execute the local Python wrapper. These are standard operations for the k-skill framework.
  • [EXTERNAL_DOWNLOADS]: The instructions direct the user to install the mcp Python package from PyPI via pip install mcp. This is a well-known, official SDK for the Model Context Protocol.
  • [DYNAMIC_EXECUTION]: The script scripts/myrealtrip_mcp.py uses importlib.import_module to dynamically load the mcp library. This is implemented to handle version compatibility between MCP SDK 1.x and 2.x, ensuring the skill works across different environment setups.
  • [COMMAND_EXECUTION]: The Python wrapper executes network requests to the official MyRealTrip MCP endpoint (https://mcp-servers.myrealtrip.com/mcp) using the established MCP HTTP transport. No sensitive local file access or exfiltration patterns were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 07:49 AM