sydney-tolls
Pass
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: SAFEDATA_EXFILTRATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Employs dynamic context injection in the
SKILL.mdfile to verify the presence of theuvpackage manager on the host system during skill initialization. - [DATA_EXFILTRATION]: Performs network requests to the OpenStreetMap Nominatim API to geocode origin and destination place names for route toll calculations.
- [EXTERNAL_DOWNLOADS]: Declares a runtime dependency on the
httpxPython package, which is automatically fetched and installed by theuvtool. - [PROMPT_INJECTION]: Processes external data from the Nominatim API, creating a surface for indirect prompt injection.
- Ingestion points: Nominatim API JSON response in
scripts/tolls.py - Boundary markers: Absent
- Capability inventory: System shell access via
Bashand file system access viaReadtools - Sanitization: The script extracts specific expected fields like coordinates and address components from the API response
Audit Metadata