trace-trade-flows
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from the WorldMonitor API, which could potentially contain malicious directives. The skill mitigates this by including an explicit 'Content safety' section instructing the agent to treat responses strictly as data and disregard any directive-like text. Ingestion points: Trade flow data from worldmonitor.app. Boundary markers: Clear safety guidelines in SKILL.md. Capability inventory: Standard network data retrieval tools. Sanitization: Supports JMESPath server-side filtering.
- [COMMAND_EXECUTION]: The documentation includes standard curl and jq examples to demonstrate API usage. These are educational in nature and do not involve executing untrusted remote code.
- [CREDENTIALS_UNSAFE]: The skill correctly handles authentication by demonstrating the use of environment variables ($WM_API_KEY) and providing only a generic placeholder string in the documentation, ensuring no actual credentials are exposed.
Audit Metadata