israeli-flight-compensation
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends using an MCP server to fetch real-time and recent arrival/departure data from the official Israel Airports Authority website (iaa.gov.il) to verify flight disruptions.
- [COMMAND_EXECUTION]: A bundled Python script ('scripts/compensation_calc.py') is used to compute statutory compensation based on flight distance and delay length. The script uses standard libraries and processes data locally.
- [PROMPT_INJECTION]: The skill is designed to ingest user-supplied flight details to generate Hebrew demand letters, which creates a surface for indirect prompt injection.
- Ingestion points: User-provided origins, destinations, and disruption descriptions processed in SKILL.md.
- Boundary markers: None identified.
- Capability inventory: Local bash execution for a Python-based calculation script.
- Sanitization: None; the agent is instructed to use user inputs directly to populate letter templates.
Audit Metadata