israeli-customs-duty-calculator

Pass

Audited by Gen Agent Trust Hub on Oct 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses a local Python script scripts/calculate_duty.py to compute landed costs. The script is highly constrained, using only Python standard library modules (argparse, decimal, json) to perform mathematical operations and input validation. It does not perform network operations or file system modifications.
  • [EXTERNAL_DOWNLOADS]: The skill references multiple official and trusted external domains for tariff lookups and exchange rates, including the Israel Tax Authority (mof.gov.il), the official Israeli government portal (gov.il), the Bank of Israel (boi.org.il), and official trade offices for the US, EU, and Canada. These references are appropriate for the skill's function and follow best practices for domain authority.
  • [INDIRECT_PROMPT_INJECTION]: While the skill ingests external data (product prices, duty rates), it utilizes a dedicated Python script with strict numeric validation to process these inputs. This structure prevents arbitrary instructions in the input data from influencing the agent's logic, effectively mitigating indirect injection risks.
  • [SAFE]: The skill demonstrates high transparency by including a detailed CHANGELOG.md, evidence.json for claim verification, and a domain-checklist.md for expert review. The vendor-related MCP server recommendation (agentskills.co.il) is consistent with the author's identity and stated purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 1, 2026, 11:29 AM