Security audit
Vrbo prices & cross-OTA comparison
Security checks for vulnerabilities and agentic risk
Overview
This skill is a straightforward travel price-checking integration that uses a disclosed StayingAPI key and sends listing/date details to StayingAPI for quotes.
Before installing, be comfortable giving the agent a StayingAPI key and sending listing URLs, dates, occupancy, and property details to StayingAPI. Use a sandbox key for evaluation, store live keys only in an appropriate environment or agent secret store, and remember live API usage may consume credits according to StayingAPI pricing.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.