aviationstack
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands (
curl) to demonstrate API usage. It also includes diagnostic commands (zero doctor check-connector) for troubleshooting connectivity to the AviationStack API. - [SAFE]: Employs environment variables (
$AVIATIONSTACK_TOKEN) for API key management, ensuring that sensitive credentials are not hardcoded within the skill instructions. - [SAFE]: All network operations are directed at the official and well-known AviationStack API domain (
api.aviationstack.com). - [SAFE]: The skill possesses a potential ingestion surface for indirect prompt injection as it processes data from an external API; however, the risk is minimal given the structured nature of flight data and the presence of standard model guardrails.
Audit Metadata