openydt-monthticket
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill interfaces with the 'openydt' CLI tool to perform various parking management operations. This includes both read-only queries (e.g., fetching ticket details) and write operations (e.g., creating ticket types or freezing accounts) which are gated by a manual confirmation flag ('--yes').
- [DATA_EXPOSURE]: The skill handles user-provided data such as license plates, user names, and phone numbers. While this constitutes an attack surface for indirect prompt injection, the data is passed to a structured CLI tool rather than being interpreted as direct instructions. No evidence of unauthorized data exfiltration or hardcoded credentials was found.
Audit Metadata