israeli-flight-compensation
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided flight details such as origin, destination, and delay length to calculate compensation amounts and draft letters (ingestion points: SKILL.md, SKILL_HE.md). While this represents an ingestion surface for potentially untrusted data, the skill limits its operations to local text processing and mathematical calculation (capability inventory: scripts/compensation_calc.py). No explicit sanitization or boundary markers are defined in the instructions to separate user-provided content from system prompts.
- [COMMAND_EXECUTION]: The skill utilizes a local Python script, scripts/compensation_calc.py, to perform calculations based on flight distance and delay. The execution is scoped by the allowed-tools frontmatter to python3, and the script uses only standard Python libraries without network access.
- [EXTERNAL_DOWNLOADS]: The skill references several authoritative external sources for legal and flight data, such as the Israel Airports Authority (iaa.gov.il), the official legal database Nevo (nevo.co.il), and consumer rights portals (kolzchut.org.il). All referenced domains are well-known and trusted organizations in the Israeli legal domain.
- [METADATA_POISONING]: Metadata fields are consistent with the skill's stated purpose of assisting with flight compensation claims. The specified supported agents and authoritative sources align with the technical implementation and stated goal.
Audit Metadata