erp-integration

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data from external storefronts and ERP systems, creating a vulnerability surface for indirect prompt injection. Ingestion points: Data enters through Shopify/WooCommerce webhooks and ERP API polling for orders, customers, and inventory (documented in SKILL.md). Boundary markers: The instructional content and code snippets do not implement delimiters or 'ignore' instructions for external data fields like customer names or order notes. Capability inventory: The skill utilizes database updates, network communication, and background job execution via bullmq. Sanitization: The implementation patterns shown do not include specific sanitization or validation steps for the external data.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 11:00 AM