pricewin-flight-search

Warn

Audited by Gen Agent Trust Hub on Aug 3, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides an installation script (install.sh) and instructs the user to execute it (bash install.sh).- [REMOTE_CODE_EXECUTION]: The installation script registers a remote MCP server endpoint (https://mcp.price.win/mcp) with various agent configuration files, which allows the agent to execute remote tools.- [EXTERNAL_DOWNLOADS]: The skill relies on external flight data fetched from a remote server.- [PERSISTENCE_MECHANISMS]: The install.sh script modifies configuration files for multiple AI agents (Claude Code, Cursor, Windsurf, Gemini, VS Code, and Codex) to register the MCP server persistently across sessions. Files targeted include ~/.claude.json, ~/.cursor/mcp.json, and others.- [DYNAMIC_EXECUTION]: The install.sh script uses a Node.js heredoc to dynamically generate and execute code for JSON manipulation.- [INDIRECT_PROMPT_INJECTION]: The skill processes flight data from Agoda, Trip.com, and Traveloka. 1. Ingestion points: poll_flight_results tool output. 2. Boundary markers: Absent. 3. Capability inventory: Terminal output and instruction following. 4. Sanitization: Absent.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 3, 2026, 01:31 PM
Security Audit — agent-trust-hub — pricewin-flight-search