inttegro-order-desk

Pass

Audited by Gen Agent Trust Hub on Sep 13, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes order and customer data retrieved from external tools and has the capability to perform state-changing operations like canceling or updating orders based on that data.
  • Ingestion points: The skill ingests external data through the list_orders and get_order tools as described in SKILL.md.
  • Boundary markers: The instructions mandate using IDs and exact returned values as the source of truth, and require verification of currency, prices, and quantities before confirmation.
  • Capability inventory: The skill has multiple write and action capabilities including create_order, update_order, finalize_order, complete_order, cancel_order, send_order_invoice, and send_order_receipt.
  • Sanitization: The skill contains explicit instructions to never reveal customer contact details (raw email or phone number) and uses customer IDs as delivery boundaries to sanitize output.
  • [SAFE]: The skill defines a dependency on an authenticated Inttegro MCP tool hosted on the official vendor domain https://mcp.inttegro.com/ for investigating and managing orders.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 13, 2026, 10:55 PM