israeli-flight-finder
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data retrieved from multiple flight search engines and a third-party MCP to generate comparisons.
- Ingestion points: Reading live fares and offer data from Google Flights, Skyscanner, KAYAK, and the Soar MCP response as described in the comparison workflow (SKILL.md Step 3).
- Boundary markers: The skill does not provide specific delimiters or instructions to the agent to disregard potential instructions embedded within the retrieved flight search results.
- Capability inventory: The skill utilizes browser tools for web navigation and the soar_search_flights tool for retrieving airfare data (SKILL.md).
- Sanitization: The instructions lack specific requirements for sanitizing or escaping the content fetched from external providers before displaying it to the user.
Audit Metadata