dropshipping-integration
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns, prompt injections, or unauthorized data exfiltration attempts were detected. The skill provides legitimate instructional content for e-commerce automation and follows standard security practices for handling API credentials and database persistence.- [INDIRECT_PROMPT_INJECTION]: The skill describes a surface for ingesting external data from supplier systems, which is a standard requirement for its primary purpose of inventory and order management.
- Ingestion points: The
syncSupplierInventoryFromCsvfunction inSKILL.mdand API response handling in the routing logic. - Boundary markers: None explicitly defined in the instructional code templates.
- Capability inventory: The skill utilizes network requests via
fetchfor order submission and database write operations for inventory updates. - Sanitization: The provided code snippets demonstrate input sanitization by converting quantitative data to numeric types using
parseIntandparseFloatbefore storage.
Audit Metadata