track-and-trace
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted external data such as shipment notes and product contents within the
ShipmentTrackingSystemandProductTraceabilitySystemclasses, which creates a surface for indirect prompt injection. - Ingestion points:
shipment_id,notes,contents, andlot_idfields inSKILL.md. - Boundary markers: The code lacks delimiters or instructions to ignore embedded commands in the processed data.
- Capability inventory: The skill uses
pandasandnumpyfor data processing and references capabilities for network communication (requests,paramiko), database access (sqlalchemy), and blockchain interaction (web3.py). - Sanitization: No input validation or sanitization is implemented for the data entered into the tracking systems.
Audit Metadata