restaurant-booking
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the @orth/cli global npm package. This package is the official tool from the vendor (orthogonal-sh) and is required for the skill's browser automation functionality.
- [COMMAND_EXECUTION]: The skill uses the orth command-line utility to interact with the Notte browser automation engine, performing tasks like starting sessions and executing page actions.
- [DATA_EXFILTRATION]: To complete reservations, the skill processes user-provided contact details (name, email, and phone). This data is sent to well-known booking services (OpenTable, Resy) and the vendor's API endpoint (api.orth.sh).
- [PROMPT_INJECTION]: The skill scrapes external web content from booking sites, which constitutes a potential surface for indirect prompt injection. This is an inherent property of browser automation tools interacting with untrusted web data.
Audit Metadata