israeli-fines-fighter
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references multiple external URLs for fine payment and appeal submission (e.g.,
gov.il,tel-aviv.gov.il,kolzchut.org.il). These are well-known technology/government services or trusted legal information repositories and are used appropriately within the skill's context. - [COMMAND_EXECUTION]: Includes a Python script (
scripts/deadline-calculator.py) used to calculate remaining days in the appeal window. The script uses only standard libraries (argparse,datetime,sys) and performs no network or sensitive file operations. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest user-provided data (fine numbers, dates, locations) to populate Hebrew appeal templates. This presents a minor attack surface for indirect injection if an attacker were to provide malicious data, but the skill uses standard templating with placeholders, and its primary capabilities are restricted to information retrieval and text generation, which limits the risk.
- [SAFE]: The author ('skills-il') has included an 'optimization-log.json' indicating a history of internal security and validity audits, specifically identifying and removing potentially misleading or broken URLs in prior versions.
Audit Metadata