yad2-second-hand-trader
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or safety violations were detected during the analysis of the skill's instructions, metadata, and supporting resources.- [COMMAND_EXECUTION]: The skill includes a local utility script (scripts/scam_score.py) for scoring interaction text against fraud indicators. The script is self-contained, using only the Python standard library to perform deterministic keyword matching, with no network access or privilege escalation potential.- [EXTERNAL_DOWNLOADS]: The skill references authoritative external resources for consumer safety and legal rights in Israel, including official government domains (gov.il), the official marketplace (yad2.co.il), and established non-profit organizations (block.org.il, kolzchut.org.il). These are well-known and trusted services within the skill's target region.- [PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted chat logs from users to identify potential scams. While this represents a data ingestion surface, the risk is negligible as the data is used for informational analysis and lacks access to any sensitive system tools or APIs that could be exploited.
Audit Metadata