track-vessel-traffic
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFEPROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [DATA_EXFILTRATION]: The skill makes network requests to
api.worldmonitor.appto fetch maritime data. This is the intended primary function of the skill and targets a domain associated with the service description. - [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection because it ingests data from an external API which is then processed by the agent.
- Ingestion points: The
get-vessel-snapshotendpoint atapi.worldmonitor.app(documented in SKILL.md). - Boundary markers: None identified in the provided documentation.
- Capability inventory: The skill uses
curlfor network data retrieval (documented in SKILL.md). - Sanitization: No explicit sanitization or validation of the API response data is described in the skill instructions.
Audit Metadata