pricewin-flight-search
Warn
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides an installation script (
install.sh) and instructs the user to execute it (bash install.sh).- [REMOTE_CODE_EXECUTION]: The installation script registers a remote MCP server endpoint (https://mcp.price.win/mcp) with various agent configuration files, which allows the agent to execute remote tools.- [EXTERNAL_DOWNLOADS]: The skill relies on external flight data fetched from a remote server.- [PERSISTENCE_MECHANISMS]: Theinstall.shscript modifies configuration files for multiple AI agents (Claude Code, Cursor, Windsurf, Gemini, VS Code, and Codex) to register the MCP server persistently across sessions. Files targeted include~/.claude.json,~/.cursor/mcp.json, and others.- [DYNAMIC_EXECUTION]: Theinstall.shscript uses a Node.js heredoc to dynamically generate and execute code for JSON manipulation.- [INDIRECT_PROMPT_INJECTION]: The skill processes flight data from Agoda, Trip.com, and Traveloka. 1. Ingestion points:poll_flight_resultstool output. 2. Boundary markers: Absent. 3. Capability inventory: Terminal output and instruction following. 4. Sanitization: Absent.
Audit Metadata