order-management-system
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill content consists of legitimate architectural guidelines and standard TypeScript implementation patterns for business operations software.
- [PROMPT_INJECTION]: The skill does not contain any instructions that attempt to override agent behavior, bypass safety filters, or extract system prompts. Instructions are focused purely on business logic for order processing.
- [DATA_EXFILTRATION]: No sensitive file paths, hardcoded credentials, or unauthorized network operations were identified. The code examples focus on internal database state transitions and fulfillments.
- [INDIRECT_PROMPT_INJECTION]: While the skill includes evaluation tasks that involve processing structured configuration data (e.g., fulfillment sources), it promotes secure implementation patterns including the use of database transactions and atomic updates, and the data inputs are provided locally within the skill package.
- [OBFUSCATION]: Analysis of the markdown instructions and TypeScript snippets found no evidence of hidden characters, Base64-encoded payloads, or homoglyph substitution attacks.
Audit Metadata