b2b-booking
Pass
Audited by Gen Agent Trust Hub on Jun 1, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill interacts with external API endpoints hosted on Aliyun (
cn-shenzhen.nlb.aliyuncsslb.com) and Google Cloud Run (asia-northeast1.run.app) to facilitate hotel searches, booking creation, and payment initiation. These references are associated with the skill's primary function and use well-known cloud infrastructure providers. - [CREDENTIALS_UNSAFE]: The skill manages a user-provided authentication token (
user_key) stored in a local configuration file (user_key.txt). The documentation provides clear guidance for users to obtain this key from an official authentication dashboard. - [PROMPT_INJECTION]: The instructions include robust defensive directives to prevent hallucinations, strictly requiring the agent to use only data from live API responses and to report errors exactly as received without fabricating information. No malicious overrides or role-play patterns were detected.
Audit Metadata