skiplagged-travel-search
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and connects to an external MCP server at
https://mcp.skiplagged.com/mcpto perform its core flight and hotel search functions. This URL belongs to the skill vendor's official domain. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external travel search results, which presents a surface for indirect prompt injection if those results contain malicious instructions.
- Ingestion points: Tool outputs from flight, fare calendar, and hotel search tools (e.g.,
sk_flights_search,sk_hotels_search) defined in the workflows ofSKILL.md. - Boundary markers: The instructions lack specific delimiters or warnings for the agent to ignore instructions potentially embedded in the tool results.
- Capability inventory: The agent can perform complex tool chaining and summarize data, which could be influenced by injected content.
- Sanitization: There are no explicit mechanisms mentioned to sanitize or validate the content returned by the search tools before processing it.
Audit Metadata