agentic-commerce
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill is a strategic framework for preparing commerce readiness assessments. It incorporates a robust evidence discipline that mandates the classification of claims into facts, inferences, and assumptions, which serves as a defensive measure against misinformation.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied evidence and external research as inputs. While this represents a potential attack surface for indirect prompt injection, the skill includes mitigating controls such as 'Completion Gates' and 'Invariants' that require evidence to be clearly distinguished from inference and validated against local behavioral evaluations.
- [COMMAND_EXECUTION]: The skill instructions direct the agent to utilize local scripts (e.g.,
dynamic_router.py,neural_router.py,skill_router.py) for handling complex or cross-functional requests. These references use relative paths (e.g.,../../scripts/) consistent with a modular agent environment and do not involve remote code downloads or execution from untrusted sources.
Audit Metadata