variant-matrix
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to help agents manage and import product data from external sources, such as supplier CSV files and platform APIs (Shopify, WooCommerce, etc.). This ingestion of untrusted data constitutes a surface for indirect prompt injection, as malicious instructions could be embedded within product descriptions or option values. \n
- Ingestion points: Supplier CSV imports and merchant-provided catalog data described in the
SKILL.mdinstructions. \n - Boundary markers: The skill does not provide specific instructions to the agent to use delimiters or to ignore instructions embedded within the processed data. \n
- Capability inventory: The skill involves database creation/update operations and platform API calls to manage inventory and pricing. \n
- Sanitization: While the code performs basic normalization for SKU generation (e.g., case folding and character replacement), it lacks sanitization for broader product content fields.
Audit Metadata