israeli-export-shipping-kit

Pass

Audited by Gen Agent Trust Hub on Oct 3, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill operates as a document generation utility. All scripts and instructions are consistent with the stated purpose of assisting Israeli exporters. Documentation references official sources such as the Israel Tax Authority, US Customs and Border Protection, and the European Commission.\n- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection as it processes untrusted user data into generated documents.\n
  • Ingestion points: Data is ingested via the --input JSON file processed by scripts/generate_invoice.py.\n
  • Boundary markers: The generated Markdown output does not utilize specific delimiters or warnings to prevent the agent from interpreting embedded instructions.\n
  • Capability inventory: scripts/generate_invoice.py has the capability to write files to the local filesystem using the --output parameter.\n
  • Sanitization: The script validates the JSON structure and types but does not perform sanitization of the string content against prompt injection or Markdown injection.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 3, 2026, 09:56 AM