import-export
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely informational and structured as a set of instructions to guide the AI in providing trade-related advice. It does not include any scripts, binaries, or executable commands.
- [DATA_EXPOSURE]: No credential harvesting, sensitive file access, or data exfiltration patterns were found. The skill references the official Thai Customs Department website (
customs.go.th) as a resource for information lookup, which is a legitimate and domain-appropriate reference. - [OBFUSCATION]: Analysis of the markdown content and metadata revealed no hidden strings, Base64 encoding, zero-width characters, or homoglyph attacks.
- [REMOTE_CODE_EXECUTION]: The skill does not perform any network operations, package installations, or remote script execution.
- [INDIRECT_PROMPT_INJECTION]: The skill acts on user-provided data such as product descriptions and trade values. However, because the skill lacks any system-level capabilities (like shell access, file writes, or network requests), the risk of exploitable indirect prompt injection is negligible.
Audit Metadata