monitor-supply-chain-stress
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill connects to
api.worldmonitor.appto fetch shipping market metrics and carrier stress indicators. - [PROMPT_INJECTION]: The skill includes a 'Content safety' section specifically designed to prevent the agent from acting on malicious instructions that might be present in the external API response (Indirect Prompt Injection mitigation).
- Ingestion points: External shipping data is ingested into the agent context via the WorldMonitor API endpoint in
SKILL.md. - Boundary markers: The skill contains explicit instructions for the agent to treat response fields strictly as content and to disregard directive-like text.
- Capability inventory: No sensitive file access, shell execution, or persistent capabilities are requested by the skill.
- Sanitization: The skill uses instructional sanitization by defining the expected nature of the response as 'data, not instructions'.
Audit Metadata