openydt-shared
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
openydtCLI binary to perform parking platform tasks. It enforces safety by requiring a--dry-runfor preview and a mandatory--yesflag for any write operations that could impact financial state or physical hardware. - [PROMPT_INJECTION]: Proactively mitigates indirect prompt injection risks by explicitly instructing the agent to treat all free-text data returned from API calls (such as parking lot names or license plate remarks) as inert data rather than executable instructions.
- [DATA_EXFILTRATION]: Network operations are confined to official service domains (
yidianting.com.cnandyidianting.xin). The instructions strictly forbid the leakage of API keys or secrets in logs or terminal output. - [SAFE]: Implements a 'Privacy Redline' policy for local 'park-notes', directing the agent to avoid recording Personally Identifiable Information (PII) like real license plates in production environments.
- [SAFE]: Establishes clear idempotency and retry logic for write operations to prevent duplicate billing or state changes during network instability, demonstrating high operational integrity.
Audit Metadata