trace-trade-flows
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill includes a 'Content safety' section that warns the agent against following directive-like text (such as 'ignore previous instructions') that might be present in the API's data responses. This is a defensive security control designed to mitigate indirect prompt injection and does not constitute a malicious attempt to override agent behavior.
- [DATA_EXFILTRATION]: The skill retrieves commodity trade information from
api.worldmonitor.app. This network activity is documented, purpose-specific, and involves no access to sensitive local files or user credentials. The API key provided in the documentation is a generic placeholder.
Audit Metadata