israeli-pension-advisor
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides educational content and tools for understanding the Israeli pension system (e.g., Keren Pensia, Keren Hishtalmut). The instructions are transparent and include prominent legal disclaimers advising users to seek licensed professional advice.
- [SAFE]: The included Python script
scripts/calculate_pension.pyuses only standard library modules (sys,argparse,dataclasses) and performs mathematical calculations on numeric inputs. It does not perform network operations or access sensitive local files. - [SAFE]: All external references and URLs point to trusted or well-known sources, including Israeli government portals (
gov.il), the National Insurance Institute (btl.gov.il), the primary Israeli rights NGO (kolzchut.org.il), and established financial institutions. - [SAFE]: A static detector flag for prompt injection concealment is a false positive. The mention of "silence" in the context of Form 161 describes the legal default behavior of the Israeli tax system (defaulting to pension continuity) rather than an instruction for the AI to hide its internal operations.
- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface where user-provided data (salary, age, birth year) is interpolated into shell commands to execute the local Python script. However, the script implements sanitization by using typed arguments (
int,float) viaargparse, which mitigates potential injection risks.
Audit Metadata