google-shopping-feed
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Use of standard environment variables for configuration. The skill correctly recommends using
process.envforSTORE_URL,STORE_NAME, andGOOGLE_SERVICE_ACCOUNT_KEY_PATH, adhering to secret management best practices rather than hardcoding credentials. - [SAFE]: Safe dependency usage. The skill utilizes established and well-maintained libraries (
xmlbuilder2,googleapis) for its core functionality, which are widely recognized as trusted packages. - [SAFE]: Proper data handling in generated code. The TypeScript examples use
.txt()methods from thexmlbuilder2library, which provides built-in protection against XML injection by automatically escaping special characters in text nodes. - [SAFE]: No malicious patterns detected. No obfuscation, persistence mechanisms, privilege escalation, or unauthorized network operations were found during the analysis.
Audit Metadata