israeli-tender-proposal-builder
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill serves as a legitimate instructional assistant for navigating Israeli tender compliance. It includes a Python helper script that is functionally limited to printing formatted tables and lacks any network, file system, or dynamic execution capabilities.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted data from external tender documents. It mitigates this attack surface by instructing the agent to use verbatim text extraction and standardized legal templates. The lack of powerful tools or risky script capabilities in the skill's environment limits the potential for exploitation from injected instructions.
- [EXTERNAL_DOWNLOADS]: The skill references historical procurement data via MCP servers hosted on the author's official infrastructure and links to well-known Israeli legal and government portals. These external references are appropriate for the skill's purpose and originate from authoritative sources.
Audit Metadata