israeli-public-transit
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches real-time transit data from
curlbus.appand references the official Ministry of Transport GTFS feed (gtfs.mot.gov.il). These are legitimate, well-known, and specific to the skill's purpose for providing Israeli public transit information. - [COMMAND_EXECUTION]: The skill includes a Python script (
scripts/check_transit.py) that usesurllib.requestto query thecurlbus.appAPI for bus stop arrivals. The execution is standard and limited to the user-provided stop code. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external transit APIs (
curlbus.app). While these are external sources, the data is typically structured (JSON) or plain text arrival times, and the skill includes instructions for the agent to handle empty responses or errors appropriately. The capability is limited to displaying arrival information. - [SAFE]: All referenced organizations (Egged, Dan, Israel Railways, Ministry of Transport) and domains are official entities or established utilities for the stated geographic scope. The skill adheres to the 'skills-il' vendor context and provides extensive evidence of data verification.
Audit Metadata