skills/sliday/skills/hotel-hunting/Gen Agent Trust Hub

hotel-hunting

Pass

Audited by Gen Agent Trust Hub on Aug 24, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill utilizes the vendor-owned service hotelist.com and its Model Context Protocol (MCP) endpoint (https://hotelist.com/mcp) for structured hotel discovery. This represents a legitimate integration between the skill and the author's own infrastructure.
  • [INDIRECT_PROMPT_INJECTION]:
  • Ingestion points: The skill processes external, untrusted content from travel platforms, Reddit, and personal blogs using web_search and browser-based tools during its discovery and complaint-mining phases.
  • Boundary markers: The instructions implement a logical boundary by requiring 'triangulation' across multiple independent sources and specific 'complaint mining' terms, which prevents the agent from over-relying on any single external input.
  • Capability inventory: The agent's capabilities include web searching, text extraction, and visual analysis of photos, with no access to sensitive system files or local command execution.
  • Sanitization: The skill prioritizes the extraction of operational data (pricing, amenities, capacity) over free-form text interpretation, naturally limiting the impact of any instructions embedded within hotel reviews.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 24, 2026, 04:50 PM
Security Audit — agent-trust-hub — hotel-hunting