israeli-celiac-navigator
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes a community-sourced list of snacks and sweets in
references/birthday-snacks.md. This represents an untrusted data ingestion surface. However, the skill provides explicit boundary markers, instructing the agent to never treat the list as certification and to always repeat the "read-the-pack" rule. Given that the skill lacks dangerous capabilities such as file system writes or arbitrary command execution, this surface is considered a standard component of the skill's navigational purpose. - [EXTERNAL_DOWNLOADS]: The skill references several authoritative Israeli resources, including the Ministry of Health (gov.il), the Bituach Leumi (btl.gov.il), and well-known health service providers (schneider.org.il, leumit.co.il). These references are used for informational and verification purposes and are consistent with the skill's primary function.
- [SAFE]: Analysis of the instructions, metadata, and scripts revealed no evidence of prompt injection, data exfiltration, or obfuscation. The skill adheres to safety best practices by including prominent medical disclaimers and routing diagnostic decisions to medical professionals.
Audit Metadata