israeli-shelter-guide
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The utility script
scripts/shelter_finder.pyincludes arefresh()function that fetches locality protection times from the official Home Front Command website (www.oref.org.il). This is a transparent functional feature designed to maintain the accuracy of life-safety information. - [COMMAND_EXECUTION]: The skill provides a standalone Python script,
scripts/shelter_finder.py, intended for use by the agent or user to perform locality lookups and update the bundled data file. The script uses only standard library modules and performs specific, documented tasks. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes data from external sources and the local
protection_times.jsonfile to generate instructions for the user. - Ingestion points: Data is fetched from
www.oref.org.ilviaurllib.requestand read from the localscripts/protection_times.jsonfile. - Boundary markers: The information is processed as structured JSON, ensuring data is not interpreted as instructions during the parsing phase.
- Capability inventory: The skill includes script execution capabilities for data management and lookup operations.
- Sanitization: The script utilizes standard Python JSON parsing to validate the structure of the incoming data.
Audit Metadata