shabbat-aware-scheduler
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEDATA_EXFILTRATIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill performs outbound network requests to the HebCal API (hebcal.com) to fetch Shabbat times and holiday metadata. This communication is essential for its primary scheduling functions and targets an established service domain.
- [EXTERNAL_DOWNLOADS]: The skill uses and recommends industry-standard dependencies including the Python libraries requests and pytz, as well as Node.js packages like @hebcal/core for holiday calculations.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from an external API source. It handles potential injection or confusion risks by using structured JSON parsing to extract specific semantic fields and includes normalization logic to handle varied typographic characters in the API responses.
Audit Metadata