pricewin-hotel-deal-finder
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill orchestrates its search workflow by spawning local Node.js processes for its browser daemon and CLI client.
- [EXTERNAL_DOWNLOADS]: The installation process downloads the Patchright browser driver and the Chromium browser engine from verified sources.
- [DATA_EXFILTRATION]: Network activity is restricted to retrieving public hotel pricing from established travel providers (Booking.com, Agoda, Google) and the OpenTravel API. Only search-related parameters are transmitted.
- [PROMPT_INJECTION]: The skill includes defensive sanitization logic in
bin/search.jsthat strips control characters and markdown control sets from scraped third-party hotel data to prevent indirect prompt injection.
Audit Metadata