quick-view-modal
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides legitimate front-end implementation guidance for e-commerce storefronts, referencing well-known and trusted platforms such as Shopify, WooCommerce, and BigCommerce.
- [INDIRECT_PROMPT_INJECTION]: The skill implements a UI pattern that fetches data from an external API, which represents a potential attack surface for indirect prompt injection if the source data is compromised.
- Ingestion points: The
QuickViewModalcomponent fetches product details from a REST API endpoint at/api/products/{id}/quick-view. - Boundary markers: No explicit delimiters or instructions to ignore embedded content are present in the provided React component templates.
- Capability inventory: The skill includes an
onAddToCartfunction that performs network operations to update the cart state, and provides links to the full product detail page. - Sanitization: The implementation uses standard React JSX interpolation, which provides default protection against basic Cross-Site Scripting (XSS) by escaping content.
Audit Metadata