zoning-analysis-nyc
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches structured lot data and tax lot polygons from NYC Open Data (data.cityofnewyork.us) and the MapPLUTO ArcGIS feature service (a841-dotweb01.nyc.gov). These are well-known, official government data services used to retrieve zoning information.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from the aforementioned APIs, which creates a potential surface for indirect prompt injection if the source data were compromised.
- Ingestion points: API responses from data.cityofnewyork.us and a841-dotweb01.nyc.gov (identified in SKILL.md).
- Boundary markers: The instructions do not define specific delimiters or 'ignore instructions' warnings for the external data processed in the workflow.
- Capability inventory: The skill utilizes Bash, Write, Edit, and WebFetch tools (identified in SKILL.md).
- Sanitization: No explicit sanitization or schema validation for the API content is described beyond standard coordinate conversion.
Audit Metadata