shop
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Provides setup instructions for the Henry MCP server using
npx -y @henrylabs/mcp@latest. This package is a vendor-owned resource associated with the skill's author, Henry-Social. - [PROMPT_INJECTION]: Ingests user-provided queries via the
$ARGUMENTSplaceholder to drive the shopping logic. While it lacks explicit delimiters for this input, it is used within the context of defined product search and checkout tools. - [CREDENTIALS_UNSAFE]: Implements proactive security measures by instructing users to set the
HENRY_SDK_API_KEYusing environment variables and specifically warns against pasting the key into the chat interface.
Audit Metadata