israeli-renovation-scope-builder
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data from the user, such as details of renovation work, counterparty identifiers, and pasted WhatsApp chat logs (referenced in Steps 1 and 9 of
SKILL.md). The instructions do not define boundary markers or sanitization steps to protect the agent from instructions that might be embedded in this user-supplied data. - Ingestion points: User-provided renovation scopes, contractor details, and chat history exports in
SKILL.mdandSKILL_HE.md. - Boundary markers: No specific delimiters or "ignore embedded instructions" warnings are prescribed for the interpolation of user data.
- Capability inventory: The skill can execute a local Python script (
scripts/payment_schedule.py) and generate detailed legal templates. - Sanitization: There are no instructions for the agent to sanitize or escape content from external data sources.
- [COMMAND_EXECUTION]: The skill uses a bundled Python script (
scripts/payment_schedule.py) to perform arithmetic validation on payment milestones and retentions. The script is invoked using theBashtool and operates purely on local input provided by the agent. - [EXTERNAL_DOWNLOADS]: The skill references and provides links to reputable Israeli legal and public information sites, including
he.wikisource.orgfor statutes,nevo.co.ilfor consolidated regulations, and official government PDFs (olaw.org.il). These references are used for informational purposes and to verify regulatory thresholds.
Audit Metadata