airport-traffic

Pass

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using the aero and jq programs. These commands are used to fetch and process flight data in JSON format within a designated /tmp directory.
  • [EXTERNAL_DOWNLOADS]: The skill references the mcp.hedwigai.com server and the un-seen/hedwigai-skills plugin marketplace. These references are part of the setup instructions for the MCP environment provided by the skill's author and are used to enable the skill's core functionality.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external flight movement data retrieved from the aero program. This establishes a data ingestion path where third-party information (airport schedules) is introduced into the agent's context. The use of jq for parsing helps ensure the data is treated as structured JSON.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 14, 2026, 11:12 AM