gpc-purchase-orders
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No security issues detected. The skill provides standard command-line examples for purchase and order management using a command-line interface tool. All commands use clear placeholders for user input.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data such as order IDs, package names, and transaction files (
transaction.json). The risk is mitigated by explicit agent instructions to verify token validity, show order details before processing, and require a manual--confirmflag for destructive actions like refunds.
Audit Metadata