grocery-shopping-kroger
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches installation scripts and configuration from the author's official GitHub repository (
AgentPMT/agent-skills). - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by processing external data.
- Ingestion points: User-provided search queries (specifically the
queryparameter inSKILL.md) and product data retrieved from the Kroger API. - Boundary markers: Absent.
- Capability inventory: Functionality is limited to grocery searching and adding items to a user's Kroger cart (
SKILL.md). - Sanitization: Documentation does not specify sanitization or validation of input data.
Audit Metadata