logistics-freight-leads
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides a command to configure a remote Model Context Protocol (MCP) server located at
https://mcp.manypi.com/mcp. This is a vendor-owned resource for the ManyPI service described in the skill documentation. - [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest and analyze external data from logistics operator registers, customs lists, and association directories. This constitutes an attack surface where untrusted external content could potentially influence the agent's behavior, although no explicit malicious payloads are present in the skill itself.
Audit Metadata