saudi-shipping
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill contains bash code snippets using the curl command to interface with logistics provider APIs for creating shipments and tracking packages.
- [DATA_EXFILTRATION]: The skill performs network operations targeting official shipping service domains including track.smsaexpress.com, ws.aramex.net, and api.naqelexpress.com. These operations are consistent with the skill's primary functionality.
- [CREDENTIALS_UNSAFE]: The documentation instructs users to handle sensitive API keys and passwords via environment variables, which is a secure practice for managing credentials in development workflows.
Audit Metadata