microsoft-store-research
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external content from the Microsoft Store, such as application descriptions and user reviews.
- Ingestion points: Data returned from the Crawlora API (described in
reference/endpoints.md) and processed by the agent. - Boundary markers: No explicit boundary markers or 'ignore' instructions are provided in the prompt templates.
- Capability inventory: The skill can perform network operations via the
scripts/crawlora.shscript. - Sanitization: The helper script implements strict input validation, including character filtering for API keys and mandatory URL-encoding for query parameters.
Audit Metadata