Aerobase Travel Concierge

• Outcome: Review
• Latest audit: May 28, 2026, 5:55 AM
• Version:
  3.3.1

Overview

This travel skill is transparent about using Aerobase, but it gives an agent access to booking, cancellation, payment-adjacent, and wallet-changing actions without enough built-in confirmation guidance.

Install only if you are comfortable giving an agent Aerobase API access to sensitive travel and account data. Use it freely for search and planning, but require manual confirmation before any booking, cancellation, card or wallet change, loyalty-program change, payment-related step, boarding-pass storage, or delete action.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Tool Misuse: Tool Parameter Abuse, Chaining Abuse, Unsafe Defaults
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration

Findings (8)

Vague Triggers

Medium

• Confidence: 91% confidence
• Finding: The skill is positioned as an all-in-one travel concierge with very broad invocation scope and few concrete trigger boundaries. In an agent setting, overly broad scope increases the chance the skill is invoked for high-impact actions like booking or cancellation without sufficient user confirmation, narrowing, or policy gating.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The documented hotel booking and cancellation endpoints enable real-world transactions, but the skill text does not clearly require an explicit user confirmation immediately before purchase or cancellation. That creates a meaningful risk of unintended financial charges, reservation creation, or destructive cancellation by an autonomous or misaligned agent.

Missing User Warnings

Medium

• Confidence: 85% confidence
• Finding: The reference exposes authentication, booking, payment, and destructive capabilities but provides no guidance about confirmation requirements, secure handling of API keys, payment data, or safeguards before executing state-changing actions. In an agent skill context, this omission can lead to unsafe automation where the agent performs sensitive operations without adequate user consent or validation.

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

- `GET /api/v1/hotels/bookings?guestId=...` - List bookings by guest
- `GET /api/v1/hotels/bookings/all` - All bookings with date filters
- `GET /api/v1/hotels/bookings/{id}` - Booking detail
- `DELETE /api/v1/hotels/bookings/{id}` - Cancel booking
- `POST /api/v1/hotels/bookings/{id}/amend` - Get alternative rates for amendments
- `GET /api/v1/hotels/chains` - Hotel chain reference data
- `GET /api/v1/hotels/currencies` - Supported currencies

• Confidence: 91% confidence
• Finding: DELETE /api/v1/hotels/bookings/{id}`

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

- `GET /api/v1/wallet` - Full wallet summary
- `GET /api/v1/wallet/cards` - List credit cards
- `POST /api/v1/wallet/cards` - Add credit card
- `DELETE /api/v1/wallet/cards` - Remove credit card
- `GET /api/v1/wallet/points` - List point balances
- `PUT /api/v1/wallet/points` - Update point balance
- `DELETE /api/v1/wallet/points` - Remove point balance

• Confidence: 89% confidence
• Finding: DELETE /api/v1/wallet/cards`

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

- `DELETE /api/v1/wallet/cards` - Remove credit card
- `GET /api/v1/wallet/points` - List point balances
- `PUT /api/v1/wallet/points` - Update point balance
- `DELETE /api/v1/wallet/points` - Remove point balance
- `GET /api/v1/wallet/programs` - List loyalty programs
- `POST /api/v1/wallet/programs` - Add loyalty program
- `DELETE /api/v1/wallet/programs` - Remove loyalty program

• Confidence: 88% confidence
• Finding: DELETE /api/v1/wallet/points`

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

- `DELETE /api/v1/wallet/points` - Remove point balance
- `GET /api/v1/wallet/programs` - List loyalty programs
- `POST /api/v1/wallet/programs` - Add loyalty program
- `DELETE /api/v1/wallet/programs` - Remove loyalty program
- `GET /api/v1/credit-cards` - Credit card transfer partners

### Recovery

• Confidence: 88% confidence
• Finding: DELETE /api/v1/wallet/programs`

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

### Saved Items
- `GET /api/v1/saved-items` - List saved items
- `POST /api/v1/saved-items` - Save an item
- `DELETE /api/v1/saved-items/{id}` - Remove saved item

### Itinerary
- `POST /api/v1/itinerary/plan` - Generate itinerary plan

• Confidence: 80% confidence
• Finding: DELETE /api/v1/saved-items/{id}`

VirusTotal

VirusTotal findings are pending for this skill version.