Ctg Travel Booking

• Analyzed: May 11, 2026, 6:53 AM
• Findings: 1
• Version: 0.2.5
• Hash: 9d15a9e210bb4fb5925f024271b703de95dfc4e23514e22cd04caba1fb31bb22
• Source: palm
• External report: View on VirusTotal

Findings (1)

The ctg-travel-booking skill is a legitimate travel reservation assistant designed to interface with the CTG Travel platform. The bundle includes a Python execution script (scripts/apiexe.py) that handles API authentication via HMAC-SHA256 signatures and communicates with a verified endpoint (pro-api.ourtour.com). While the skill processes sensitive user data such as identity numbers and contact information, this is necessary for its stated purpose of booking flights, hotels, and trains. The instructions in SKILL.md and the various guide files are well-structured, focusing on parameter collection and user guidance without any signs of malicious intent or prompt injection.