logistics-exception-management
Warn
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: MEDIUMMETADATA_POISONINGINDIRECT_PROMPT_INJECTION
Full Analysis
- [METADATA_POISONING]: The skill's YAML frontmatter contains conflicting authorship information. The 'author' field identifies 'evos' and the 'homepage' points to a repository under 'affaan-m', while the system context identifies the author as 'ysyecust'. This lack of attribution consistency misrepresents the skill's origin.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze data from external, potentially untrusted sources such as carrier portals, GPS logs, and shipping documentation, creating a vulnerability surface for malicious instructions embedded in that data.\n
- Ingestion points: Carrier portals, transportation management systems (TMS), delivery receipts, and commercial invoices referenced in SKILL.md.\n
- Boundary markers: Absent. No delimiters or explicit warnings are provided to the agent to distinguish between its core instructions and external data content.\n
- Capability inventory: None. The skill does not include any executable scripts, tool-based capabilities, or shell commands.\n
- Sanitization: Absent. The skill lacks instructions for validating, escaping, or filtering content retrieved from external logistics systems.
Audit Metadata