video-commerce-integration
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides integration guides for established e-commerce platforms and well-known service providers (Tolstoy, Firework, Mux, Cloudflare Stream). All recommended external resources are from recognized technology vendors.
- [EXTERNAL_DOWNLOADS]: The skill recommends using JavaScript embeds from Tolstoy and Firework to add shoppable video widgets to storefronts. These recommendations refer to well-known services and represent standard integration patterns for the described marketing features.
- [INDIRECT_PROMPT_INJECTION]: The provided React component implementation fetches product metadata from an internal API to display hotspots. While this creates a data ingestion surface, the implementation follows standard patterns for dynamic UIs.
- Ingestion points: Product data fetched from the shop's API endpoint in the
ShoppableVideoPlayercomponent. - Boundary markers: None explicitly implemented in the instructional code snippets; however, the data is restricted to product catalog IDs.
- Capability inventory: React DOM rendering of product names, prices, and images;
addToCartfunction call. - Sanitization: Relies on standard React DOM escaping for rendered strings.
Audit Metadata