crazy-ecommerce-builder-skill

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute production build commands to validate the generated storefront before deployment. This is a standard and necessary step for a web development automation tool.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data in the form of company briefs and product catalogs to generate site content.
  • Ingestion points: Product briefs, company details, and catalog information are processed as described in SKILL.md and README.md.
  • Boundary markers: No explicit delimiters or boundary markers are defined for the input data in the instructions.
  • Capability inventory: The skill possesses capabilities for file modification, shell command execution (builds), image generation, and network publishing as defined in SKILL.md.
  • Sanitization: No explicit sanitization or input validation logic is present to filter malicious instructions within the product briefs.
  • [EXTERNAL_DOWNLOADS]: The README.md documentation includes an installation command using npx to fetch the skill from the author's public repository. This is a standard distribution mechanism for this platform.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 10:28 AM