ecommerce-advisor

Pass

Audited by Gen Agent Trust Hub on Oct 27, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes a Python script scripts/ecom_unit_economics_calculator.py intended for local execution. Analysis of the source code confirms it performs purely mathematical calculations on provided JSON data and outputs results to the console. It does not perform any network operations, access sensitive system files, or execute shell commands.
  • [REMOTE_CODE_EXECUTION]: No remote code execution patterns were detected. All scripts and references are local to the skill package.
  • [DATA_EXFILTRATION]: The skill operates entirely on local files provided by the user. There are no curl, wget, or socket operations that could send data to external servers.
  • [INDIRECT_PROMPT_INJECTION]: While the skill processes user-inputted JSON data for calculations, the attack surface is minimal as the data is parsed as float/numeric values and is not interpolated back into the agent's system prompts in an executable or instruction-overriding manner.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 27, 2026, 11:10 PM