cross-sell-upsell-engine
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill outlines logic for processing customer data to drive recommendations, which constitutes a potential indirect prompt injection surface.
- Ingestion points: The engine processes order history retrieved from databases (
SKILL.md) and user browsing data. - Boundary markers: Not explicitly implemented in the provided architectural code samples.
- Capability inventory: The skill demonstrates database read access and network requests to recommendation APIs.
- Sanitization: As the code provided is illustrative of core logic, specific sanitization of input data is left to the implementer.
- [EXTERNAL_DOWNLOADS]: The skill references and provides integration examples for reputable e-commerce service providers like Rebuy and Recombee.
Audit Metadata