skills/clawic/skills/Panama/Gen Agent Trust Hub

Panama

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill's setup instructions include a shell command to create a dedicated local directory for trip data: mkdir -p ~/panama. This is a standard initialization step for the skill's local memory feature.
  • [PROMPT_INJECTION]: The skill implements a persistence mechanism using a local memory file (~/panama/memory.md) to store trip details and constraints. This creates a surface for indirect prompt injection, as the agent is instructed to 'read it silently' and 'reuse known preferences' in future sessions.
  • Ingestion points: Trip context is gathered from user interaction and stored in ~/panama/memory.md (as defined in SKILL.md and setup.md).
  • Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands within the memory file.
  • Capability inventory: The skill possesses the capability to execute shell commands (e.g., directory creation) and manage local file content within the specified path.
  • Sanitization: No explicit sanitization or validation of the retrieved memory content is described in the logic.
  • [EXTERNAL_DOWNLOADS]: The sources.md file contains numerous links to official Panamanian resources, including the tourism board (tourismpanama.com), national migration office (migracion.gob.pa), international airport (tocumenpanama.aero), and public transit services (elmetrodepanama.com, mibus.com.pa). These are legitimate, well-known public services.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 01:14 PM
Security Audit — agent-trust-hub — Panama