last-mile-delivery

Pass

Audited by Gen Agent Trust Hub on Sep 20, 2026

Risk Level: SAFEDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [DATA_EXFILTRATION]: The skill contains Python code in SKILL.md that defines a function optimize_routes_api which performs a network POST request to https://api.routeoptimizer.com/v1/optimize. While the data transmitted (delivery stops and vehicle capacity) is relevant to the skill's purpose, the domain is not a recognized whitelisted service or trusted provider.
  • [INDIRECT_PROMPT_INJECTION]: The skill's optimization modules (DeliveryDensityAnalyzer, TimeWindowOptimizer, MicroFulfillmentOptimizer, and LockerNetworkOptimizer) are designed to ingest and analyze external datasets.
  • Ingestion points: These include historical_deliveries DataFrames, delivery_locations arrays, and stops lists passed to optimization functions in SKILL.md.
  • Boundary markers: The provided scripts do not include boundary markers or specific instructions to ignore potentially malicious directives embedded within the logistics data.
  • Capability inventory: The skill possesses network communication capabilities via the requests library and data processing logic through pandas and numpy.
  • Sanitization: There is no evidence of data sanitization, schema validation, or filtering for the external inputs before they are processed by the internal logic.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 20, 2026, 07:40 AM