boi-economic-data
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill communicates exclusively with official Israeli government domains (
edge.boi.gov.ilandapi.cbs.gov.il) to retrieve public economic indicators. These are established, well-known services. - [SAFE]: The included Python script
scripts/fetch_boi_rates.pyis well-structured and uses only Python standard library modules (urllib.request,xml.etree.ElementTree,json). It includes robust error handling and explicitly maintains TLS certificate verification. - [SAFE]: No prompt injection, obfuscation, or persistence mechanisms were detected. The instructions are clearly oriented toward helping an agent retrieve and interpret financial data for the user.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from government APIs. While this technically constitutes an ingestion surface, the risk is minimal because the script extracts only specific numerical and date fields. The skill does not possess capabilities that could be exploited by malicious data (e.g., it does not write to the filesystem or execute shell commands based on API input).
Audit Metadata