israeli-utility-rates-comparator
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to analyze user-supplied utility bills and retrieve data from external comparison websites (e.g., gov.il, kamaze.co.il, iec.co.il) using the WebFetch tool. This introduces an attack surface where malicious content within a bill or on a third-party website could attempt to manipulate the agent's execution logic or guidance.\n
- Ingestion points: Analysis of user-uploaded utility bills and retrieval of real-time rate information from various Israeli utility and comparison domains.\n
- Boundary markers: The skill instructions do not specify the use of delimiters or security warnings to isolate untrusted external content from the agent's primary instructions.\n
- Capability inventory: The skill allows the use of WebFetch for data collection and Bash(python:*) to perform calculations for ROI, seasonal electricity shifting, and bill comparisons.\n
- Sanitization: There is no requirement in the instructions to sanitize, escape, or validate external data before it is processed by the agent's computational tools.
Audit Metadata