product-match
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Comprehensive analysis of the skill's instructions and implementation reveals no evidence of malicious intent, obfuscation, or unauthorized data access.
- [EXTERNAL_DOWNLOADS]: The README.md provides installation instructions that reference the official GitHub repository of the author, AlpacaLabsLLC. This is consistent with standard skill distribution and deployment practices.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external websites retrieved via the
WebFetchtool to extract product specifications. - Ingestion points: External product URLs and web search results are processed in Step 3 of the workflow.
- Boundary markers: The instructions do not define specific delimiters for untrusted web content.
- Capability inventory: The skill has access to file system tools (
Write,Edit) and shell access (Bash), as well as Google Sheets integration via MCP. - Sanitization: No explicit sanitization or filtering of external web content is described before processing.
Audit Metadata