octotrip-rental-car-search
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to search for and display data from an external rental car provider, which creates a surface for indirect prompt injection if the source data contains malicious instructions.
- Ingestion points: Rental car search results returned from the
octotrip-rental-carsMCP server defined inSKILL.md. - Boundary markers: The instructions lack requirements for the agent to use delimiters or ignore instructions embedded within the search results.
- Capability inventory: The skill does not possess high-risk capabilities such as arbitrary command execution or file system modification; it is limited to data retrieval and presentation.
- Sanitization: No sanitization or validation steps are defined for the data received from the external API.
- [EXTERNAL_DOWNLOADS]: The skill configuration references an external service for its core functionality.
- The
octotrip-rental-carstool connects tohttps://mcp.octotrip.app/rental-cars/mcpto retrieve real-time pricing and availability data.
Audit Metadata