israeli-home-defect-report
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes a bundled Python script (
scripts/defect_window.py) to calculate statutory deadlines. Analysis of the script confirms it uses only standard library modules (argparse,datetime,sys) and performs deterministic date arithmetic without any network access, file system writes, or dynamic code execution. - [EXTERNAL_DOWNLOADS]: The skill contains links to official Israeli government resources (
govforms.gov.il) and established legal information portals (nevo.co.il,kolzchut.org.il). These references are used for user information and verification and do not involve the download or execution of remote scripts. - [PROMPT_INJECTION]: The instructions include a 'Safety Gate' (Step 0) that requires the agent to stop and warn the user if signs of structural danger are described. These constraints serve as safety boundaries to ensure the agent does not provide dangerous or unauthorized engineering advice and do not constitute malicious injection or behavior overriding.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided dates and defect descriptions. The attack surface is limited as the inputs are passed to a script with strict validation (ISO date parsing) and used to generate static letter templates. No high-risk capabilities are exposed to this data.
Audit Metadata