mena-partnerships-distribution

Pass

Audited by Gen Agent Trust Hub on Jun 30, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is designed for drafting and reviewing MENA partnership motions (resellers, agencies, SIs, etc.) and explicitly prohibits the agent from signing agreements, submitting applications, or promising access to restricted entities.
  • [EXTERNAL_DOWNLOADS]: The sources.yml file references official government procurement portals (e.g., etimad.sa, mof.gov.ae), international trade guides (trade.gov), and well-known industry platforms (e.g., Amazon Payment Services, Aramex). These references are used for data-backed planning and do not involve executable code downloads.
  • [DATA_EXFILTRATION]: Instructions in SKILL.md and references/integration-checklist.md specifically mandate keeping credentials and secrets out of prompts, logs, and source control, while requiring sandbox-first testing for technical integrations.
  • [PROMPT_INJECTION]: The skill includes robust 'Anti-Stereotype Rules' and 'Source and Confidence Rules' that prevent the model from making unsupported claims about regional groups or ignoring safety constraints.
  • [COMMAND_EXECUTION]: A local maintenance script scripts/list-vendors.mjs is provided; it is a benign Node.js script used to output a static JSON object and contains no network or file-system write operations.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 30, 2026, 05:52 AM