israeli-drug-database
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches drug registration data and consumer leaflets from official Israeli government domains (
israeldrugs.health.gov.ilandmohpublic.health.gov.il). These are official resources necessary for the skill's stated purpose. - [INDIRECT_PROMPT_INJECTION]: The skill processes pharmaceutical data and safety leaflets from external government APIs, which represents an ingestion surface for external content.
- Ingestion points: Registry search results and PDF brochures from the Ministry of Health enter the agent context.
- Boundary markers: The instructions include comprehensive 'Hard refusal rules' that prohibit the agent from providing medical advice, dosing, or interaction information, instead requiring it to refer users to the original leaflets and pharmacists.
- Capability inventory: The skill uses Python and curl to query the registry; no unauthorized file writing or suspicious network exfiltration patterns were detected.
- Sanitization: Registry data is parsed as structured JSON via a bundled script that validates response format.
Audit Metadata