ecommerce-data-warehouse
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill provides legitimate instructions for data warehousing using well-known services and standard Python packages.
- [INDIRECT_PROMPT_INJECTION]: The skill describes pipelines for ingesting data from external e-commerce platforms (Shopify, WooCommerce, etc.). While this technically creates an attack surface for indirect prompt injection (e.g., via malicious content in customer notes or order data), the risk is inherent to the intended data-processing purpose of the skill and is mitigated by the analytical SQL-based environment.
- Ingestion points: Shopify/WooCommerce/BigCommerce APIs via Fivetran/Stitch (SKILL.md)
- Boundary markers: None specified for raw data content.
- Capability inventory: SQL execution in cloud data warehouses, dbt model transformations.
- Sanitization: Standard SQL data types and schema validation are applied.
Audit Metadata