social-commerce

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides boilerplate code for standard backend operations required for catalog synchronization.
  • Code snippets in SKILL.md include database queries using an ORM pattern (db.products.findAll) and network requests to external APIs using fetch.
  • [EXTERNAL_DOWNLOADS]: The skill references established libraries and official service provider endpoints.
  • It identifies dependencies on standard packages such as fast-xml-parser and the facebook-nodejs-business-sdk.
  • It includes implementation details for communicating with official Meta Graph API endpoints (graph.facebook.com/v18.0/).
  • [INDIRECT_PROMPT_INJECTION]:
  • Ingestion points: The skill provides templates that process product metadata (titles and descriptions) sourced from a database in SKILL.md.
  • Boundary markers: Content is formatted into structured XML and JSON formats, which provide inherent structural delimiters.
  • Capability inventory: The generated code is capable of making outbound network requests to synchronize data with social media platforms.
  • Sanitization: The implementation relies on standard serialization tools like XMLBuilder and JSON.stringify to handle character escaping for the output formats.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 11:00 AM