israeli-cloud-cost-comparator
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is designed for cloud cost comparison and benchmarking within the Israeli market, focusing on AWS, GCP, Azure, Oracle, and local providers.
- [SAFE]: Data fetching is restricted to official cloud provider APIs, government sites (Bank of Israel, Privacy Protection Authority), and established cloud cost tracking services. These well-known technology companies and cloud services are recognized as trusted sources.
- [SAFE]: No evidence of hardcoded credentials, sensitive file access, or persistence mechanisms was found in the instructions, scripts, or metadata.
- [SAFE]: The skill follows security and reliability best practices by explicitly instructing the agent not to hallucinate pricing if a fetch fails and to direct the user to official sources.
- [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect prompt injection because it ingests external pricing data from the web.
- Ingestion points: Pricing data and regional availability information fetched via WebFetch from multiple external cloud provider sites.
- Boundary markers: The instructions recommend verifying information on official pages but do not define strict delimiters for the fetched content within the agent's context.
- Capability inventory: The skill has access to Bash (Node.js and Python3) and WebFetch tools.
- Sanitization: There is no explicit sanitization step described, but the risk is mitigated by the use of trusted/official vendor domains.
Audit Metadata