merchandising-rules

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill contains technical guides for implementing merchandising rules on platforms like Shopify, WooCommerce, and BigCommerce. The provided TypeScript code is a pure mathematical utility for scoring products based on normalized performance metrics (sales, revenue, conversion). No dangerous system calls, network operations, or sensitive data access were found.- [EXTERNAL_DOWNLOADS]: The skill references established e-commerce services and tools such as Algolia, SearchPie, and Kimonix. These references are documented neutrally as part of the merchandising workflow and do not involve untrusted remote code execution.- [INDIRECT_PROMPT_INJECTION]: The skill describes processing external product metrics and merchandising rules. While this constitutes an input surface for untrusted data, the logic is limited to scoring algorithms and search query construction (Elasticsearch), representing a standard business automation use case without specific injection vulnerabilities detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 11:00 AM