dropshipping-integration

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: No malicious patterns, prompt injections, or unauthorized data exfiltration attempts were detected. The skill provides legitimate instructional content for e-commerce automation and follows standard security practices for handling API credentials and database persistence.- [INDIRECT_PROMPT_INJECTION]: The skill describes a surface for ingesting external data from supplier systems, which is a standard requirement for its primary purpose of inventory and order management.
  • Ingestion points: The syncSupplierInventoryFromCsv function in SKILL.md and API response handling in the routing logic.
  • Boundary markers: None explicitly defined in the instructional code templates.
  • Capability inventory: The skill utilizes network requests via fetch for order submission and database write operations for inventory updates.
  • Sanitization: The provided code snippets demonstrate input sanitization by converting quantitative data to numeric types using parseInt and parseFloat before storage.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 11:00 AM