openydt-shared

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes the openydt CLI binary to perform parking platform tasks. It enforces safety by requiring a --dry-run for preview and a mandatory --yes flag for any write operations that could impact financial state or physical hardware.
  • [PROMPT_INJECTION]: Proactively mitigates indirect prompt injection risks by explicitly instructing the agent to treat all free-text data returned from API calls (such as parking lot names or license plate remarks) as inert data rather than executable instructions.
  • [DATA_EXFILTRATION]: Network operations are confined to official service domains (yidianting.com.cn and yidianting.xin). The instructions strictly forbid the leakage of API keys or secrets in logs or terminal output.
  • [SAFE]: Implements a 'Privacy Redline' policy for local 'park-notes', directing the agent to avoid recording Personally Identifiable Information (PII) like real license plates in production environments.
  • [SAFE]: Establishes clear idempotency and retry logic for write operations to prevent duplicate billing or state changes during network instability, demonstrating high operational integrity.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 01:16 PM
Security Audit — agent-trust-hub — openydt-shared