ce
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs the agent to fetch documentation from llm-docs.commercengine.io. This is an official vendor domain used to serve markdown content to AI agents.\n- [EXTERNAL_DOWNLOADS]: References official Node.js packages including @commercengine/storefront and @commercengine/ssr-utils for installation, which are verified vendor resources.\n- [INDIRECT_PROMPT_INJECTION]: The skill specifies an ingestion point for external documentation at llm-docs.commercengine.io. Although explicit boundary markers and sanitization steps are not provided in the router, the skill lacks dangerous capabilities (such as shell execution, file system writes, or network data exfiltration) that would allow for exploitation via this vector.
Audit Metadata