social-commerce
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides boilerplate code for standard backend operations required for catalog synchronization.
- Code snippets in
SKILL.mdinclude database queries using an ORM pattern (db.products.findAll) and network requests to external APIs usingfetch. - [EXTERNAL_DOWNLOADS]: The skill references established libraries and official service provider endpoints.
- It identifies dependencies on standard packages such as
fast-xml-parserand thefacebook-nodejs-business-sdk. - It includes implementation details for communicating with official Meta Graph API endpoints (
graph.facebook.com/v18.0/). - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill provides templates that process product metadata (titles and descriptions) sourced from a database in
SKILL.md. - Boundary markers: Content is formatted into structured XML and JSON formats, which provide inherent structural delimiters.
- Capability inventory: The generated code is capable of making outbound network requests to synchronize data with social media platforms.
- Sanitization: The implementation relies on standard serialization tools like
XMLBuilderandJSON.stringifyto handle character escaping for the output formats.
Audit Metadata