ticket-availability
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes npx to fetch and run the @nomadamas/k-skill CLI tool from the NPM registry. This tool is a vendor-owned resource used for instruction management and script execution.
- [COMMAND_EXECUTION]: The skill instructions direct the agent to execute shell commands to install the httpx library and run the included Python script.
- [INDIRECT_PROMPT_INJECTION]: The skill processes performance URLs provided by the user. It sanitizes the input by extracting numeric identifiers using regular expressions before making network requests to verified public endpoints.
Audit Metadata