yad2-second-hand-trader
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied item descriptions and interaction logs to generate listing content or evaluate scam risks. While this represents a surface for indirect prompt injection, the skill is not granted any tool permissions or network access, which effectively neutralizes potential exploit paths.
- [COMMAND_EXECUTION]: The skill includes a local utility script
scripts/scam_score.pyused to score interactions against known fraud indicators. Technical review of the script confirms it uses only standard Python libraries for basic string matching and does not perform any risky operations such as subprocess spawning or network requests. - [EXTERNAL_DOWNLOADS]: The skill documentation references several external URLs belonging to trusted Israeli government services, legal information portals, and the official Yad2 marketplace. These are provided as informational resources for the user and are not used to download or execute remote code.
- [SAFE]: Extensive analysis of the instructions and accompanying files reveals no malicious patterns, including credential harvesting, persistence mechanisms, or obfuscation techniques. The behavior of the skill is consistent with its stated purpose of improving marketplace safety.
Audit Metadata