wishlist-save-for-later
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate developer guidance for implementing storefront features on platforms like Shopify, WooCommerce, and BigCommerce, as well as custom headless environments.
- [DATA_EXPOSURE_EXFILTRATION]: The skill includes specific security considerations for shared wishlists, instructing that public pages must only render non-sensitive product data (name, image, price) while explicitly excluding customer identifiers, addresses, and personal notes.
- [INDIRECT_PROMPT_INJECTION]: The skill manages data from external sources (browser storage and sharing slugs) but implements defensive patterns including robust error handling (try/catch blocks) and data sanitization via specific field inclusion logic.
- [COMMAND_EXECUTION]: The provided code snippets demonstrate safe use of browser APIs and standard asynchronous fetch operations for server synchronization; no dangerous shell commands or arbitrary execution patterns are present.
Audit Metadata