last-mile-delivery
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill contains Python code in
SKILL.mdthat defines a functionoptimize_routes_apiwhich performs a networkPOSTrequest tohttps://api.routeoptimizer.com/v1/optimize. While the data transmitted (delivery stops and vehicle capacity) is relevant to the skill's purpose, the domain is not a recognized whitelisted service or trusted provider. - [INDIRECT_PROMPT_INJECTION]: The skill's optimization modules (
DeliveryDensityAnalyzer,TimeWindowOptimizer,MicroFulfillmentOptimizer, andLockerNetworkOptimizer) are designed to ingest and analyze external datasets. - Ingestion points: These include
historical_deliveriesDataFrames,delivery_locationsarrays, andstopslists passed to optimization functions inSKILL.md. - Boundary markers: The provided scripts do not include boundary markers or specific instructions to ignore potentially malicious directives embedded within the logistics data.
- Capability inventory: The skill possesses network communication capabilities via the
requestslibrary and data processing logic throughpandasandnumpy. - Sanitization: There is no evidence of data sanitization, schema validation, or filtering for the external inputs before they are processed by the internal logic.
Audit Metadata