gkmex-crane-comparison
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill retrieves crane inventory data from the vendor's official endpoint at gkmex.com. This interaction is restricted to public, read-only API calls.- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources (API and tools), creating a potential surface for indirect instructions.
- Ingestion points:
list_cranesandget_cranetools, and the REST API atgkmex.com/api/v1/cranes. - Boundary markers: Instructions mandate keeping published facts separate from judgment and explicitly marking missing values as unknown.
- Capability inventory: The skill is designed to format data into comparison tables and provide recommendations based on user priorities; it lacks dangerous execution capabilities.
- Sanitization: The instructions include specific rules for handling null values (POA) and prohibit unit conversion or inference of missing data.
Audit Metadata