ce-catalog
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides documentation for the Commerce Engine product catalog. All external references point to official vendor domains (
commercengine.io) and repositories (github.com/commercengine). - [INDIRECT_PROMPT_INJECTION]: The skill includes instructions to retrieve documentation from an external source (
llm-docs.commercengine.io). While this creates an ingestion point for untrusted data, the source is a vendor-owned domain used for standard API documentation. - Ingestion points: External documentation fetched from
llm-docs.commercengine.io. - Boundary markers: The skill does not define specific delimiters for the remote content.
- Capability inventory: The skill restricts the agent to the
Bashtool via frontmatter configuration. - Sanitization: No custom sanitization logic is implemented for the fetched content.
Audit Metadata