israeli-education-system
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources which could be used to influence agent behavior through embedded instructions.
- Ingestion points: The skill queries school data from
data.gov.iland fetches university admission details from external university domains via theWebFetchtool. - Boundary markers: No specific boundary markers or instructions to ignore instructions within fetched content are present in the skill's prompts.
- Capability inventory: The skill is authorized to use
WebFetchfor network requests and can execute a local Python script (scripts/calculate_sekhem.py) for score calculations. - Sanitization: The instructions do not define any sanitization or validation processes for data retrieved from external sources before it is processed by the agent.
Audit Metadata