tdg-personal/carrier-relationship-management
>
54
68%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
The SKILL.md workflow explicitly requires consulting open public third-party sources (e.g., FMCSA SAFER/Insurance tabs, DAT RateView, Greenscreens, Carrier411/CarrierOK) to vet carriers and make allocation/award decisions, so the agent would ingest untrusted user-sourced web content that can materially change its actions.
Where we found it
FMCSA SAFER
domain · 13 sites
The plugin instructs the agent to consult FMCSA SAFER and related FMCSA data (authority, insurance, bond/trust, safety ratings, compliance checks) across multiple workflow steps — onboarding, evaluation, monitoring, and exit decisions.
DAT RateView
domain · 11 sites
The plugin instructs the agent to consult DAT RateView for lane-level rate benchmarks, load-to-truck ratios, and market direction — data that directly drives rate negotiation, RFP evaluation, and contract renegotiation decisions.
Greenscreens
domain · 4 sites
The plugin instructs the agent to consult Greenscreens for carrier-specific pricing intelligence and predictive analytics, data that directly influences rate negotiation and carrier evaluation.
SKILL.md
24
DAT/Greenscreens for market intelligence
SKILL.md
55
benchmark against DAT or Greenscreens lane rates
SKILL.md
84
current rates exceed market benchmarks (DAT, Greenscreens, Chainalytics)
SKILL.md
93
Greenscreens provides carrier-specific pricing intelligence and predictive analytics
Carrier411
domain · 3 sites
The plugin instructs the agent to check Carrier411 for driver complaints and financial distress indicators, data that directly drives carrier diversification and exit decisions.
SKILL.md
120
late payments to drivers reported on Carrier411, FMCSA insurance lapses
SKILL.md
138
driver complaints on CarrierOK or Carrier411, unexplained service collapse
SKILL.md
150
Carrier411 complaints spiking
CarrierOK
domain · 1 site
The plugin instructs the agent to check CarrierOK for driver complaints as a financial distress indicator, data that directly drives carrier exit decisions.
SKILL.md
138
driver complaints on CarrierOK or Carrier411, unexplained service collapse
Chainalytics
domain · 1 site
The plugin instructs the agent to use Chainalytics as a rate benchmarking source for identifying underperforming lanes during pre-RFP analysis.
SKILL.md
84
current rates exceed market benchmarks (DAT, Greenscreens, Chainalytics)
- Audited
- Security analysis