ulta-research
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a bash script (scripts/crawlora.sh) to interface with the vendor's API via curl. The script is securely implemented, using array-based argument handling and explicit URL-encoding to prevent command injection vulnerabilities.\n- [PROMPT_INJECTION]: The skill retrieves and processes external content from the Ulta Beauty catalog via the Crawlora API, which creates a surface for indirect prompt injection.\n
- Ingestion points: Product descriptions, customer questions, and reviews fetched from the Crawlora API (documented in reference/endpoints.md).\n
- Boundary markers: No explicit delimiters or instructions are used to separate external content from agent instructions.\n
- Capability inventory: Shell command execution capability is present via scripts/crawlora.sh.\n
- Sanitization: The skill uses jq for JSON formatting but does not implement content sanitization or filtering.
Audit Metadata