ecommerce-full-pipeline
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs users to a source code repository on Gitee (
gitee.com/anbeime/ebay) for its primary components. - [COMMAND_EXECUTION]: The tool operates through a Python CLI (
main.py) that manages various sub-modules for scraping, video generation, and platform publishing. - [DATA_EXFILTRATION]: The fulfillment engine (
fulfillment.py) is designed to handle sensitive personally identifiable information (PII) including names, phone numbers, and addresses to automate ordering on 1688. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface due to its scraping of untrusted product data from 1688 and Xianyu which is then used to generate marketing materials and video content. 1. Ingestion points: Data is pulled from external sites via
scraper.pyandxianyu_scraper.py. 2. Boundary markers: No explicit boundaries or instructions are provided to mitigate the risk of the agent interpreting instructions hidden in scraped data. 3. Capability inventory: The tool has the ability to write to the filesystem, perform network operations, and generate multimedia content. 4. Sanitization: Thecleaner.pymodule performs data normalization and business-logic filtering but does not implement security-focused input sanitization for adversarial text.
Audit Metadata