product-comparison
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No security threats were identified across the 11 categories analyzed. The skill focuses on legitimate UI implementation and e-commerce platform configuration. No malicious command execution, privilege escalation, or persistence mechanisms were found.- [INDIRECT_PROMPT_INJECTION]: The skill implements a UI for displaying product attributes. This represents a surface where untrusted data (product specs) could be displayed, though the risk is minimal.
- Ingestion points: Product data passed to
ComparisonTrayandProductComparisonTablecomponents inSKILL.md. - Boundary markers: Absent. The component assumes the provided product data is well-formed and safe to display.
- Capability inventory: No dangerous capabilities (network, filesystem, shell) are present in the provided implementation.
- Sanitization: Standard React interpolation is used, which provides default protection against basic XSS.
Audit Metadata