import-export

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is entirely informational and structured as a set of instructions to guide the AI in providing trade-related advice. It does not include any scripts, binaries, or executable commands.
  • [DATA_EXPOSURE]: No credential harvesting, sensitive file access, or data exfiltration patterns were found. The skill references the official Thai Customs Department website (customs.go.th) as a resource for information lookup, which is a legitimate and domain-appropriate reference.
  • [OBFUSCATION]: Analysis of the markdown content and metadata revealed no hidden strings, Base64 encoding, zero-width characters, or homoglyph attacks.
  • [REMOTE_CODE_EXECUTION]: The skill does not perform any network operations, package installations, or remote script execution.
  • [INDIRECT_PROMPT_INJECTION]: The skill acts on user-provided data such as product descriptions and trade values. However, because the skill lacks any system-level capabilities (like shell access, file writes, or network requests), the risk of exploitable indirect prompt injection is negligible.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 04:02 PM