trip-planner
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill automates the creation of GitHub issues using the
gh issue createcommand. This is used to save the final trip plan to thevamseeachanta/achantas-datarepository. It correctly uses a temporary file and the--body-fileargument to handle the content securely. - [EXTERNAL_DOWNLOADS]: The
curltool is employed to verify the status of image URLs. This prevents the inclusion of broken links in the generated itineraries by checking HTTP response headers. - [DATA_EXFILTRATION]: While the skill transmits data to an external GitHub repository, this repository is owned by the vendor (
vamseeachanta). This is a legitimate use of the tool for its stated purpose of managing trip data. - [PROMPT_INJECTION]: The instructions focus entirely on the travel planning workflow and do not contain any patterns typical of prompt injection or attempts to bypass AI safety constraints.
Audit Metadata