airbnb-scraper-api
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from Airbnb listings, specifically guest review bodies and host descriptions.
- Ingestion points: Data enters the agent context through the
/api/v1/airbnb/listingand/api/v1/airbnb/reviewsendpoints (SKILL.md). - Boundary markers: None identified in the prompt templates.
- Capability inventory: The skill allows network requests to the
api.scavio.devdomain via therequestslibrary orscavioSDK (SKILL.md). - Sanitization: The documentation includes a guardrail instruction to 'Summarise; do not build profiles of individuals,' which directs the agent's handling of personal data but does not provide technical sanitization of the input content.
Audit Metadata