plan-tour-route
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions specify fetching geocoding and geographic data from the Nominatim and Overpass APIs (openstreetmap.org). These are well-known services standard for travel and mapping applications.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources (POI data and geocoding results) which theoretically could contain malicious instructions.
- Ingestion points: Data is fetched from openstreetmap.org and overpass-api.de during the geocoding (Step 2) and POI discovery (Step 5) phases.
- Boundary markers: The instructions do not define specific delimiters for the external data, though it is processed as structured JSON.
- Capability inventory: The skill has access to Bash, WebFetch, and WebSearch tools.
- Sanitization: There are no explicit sanitization steps mentioned for the fetched place names or descriptions, but the risk is minimized by the structured nature of the API responses.
Audit Metadata