inttegro-order-desk
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes order and customer data retrieved from external tools and has the capability to perform state-changing operations like canceling or updating orders based on that data.
- Ingestion points: The skill ingests external data through the
list_ordersandget_ordertools as described inSKILL.md. - Boundary markers: The instructions mandate using IDs and exact returned values as the source of truth, and require verification of currency, prices, and quantities before confirmation.
- Capability inventory: The skill has multiple write and action capabilities including
create_order,update_order,finalize_order,complete_order,cancel_order,send_order_invoice, andsend_order_receipt. - Sanitization: The skill contains explicit instructions to never reveal customer contact details (raw email or phone number) and uses customer IDs as delivery boundaries to sanitize output.
- [SAFE]: The skill defines a dependency on an authenticated Inttegro MCP tool hosted on the official vendor domain
https://mcp.inttegro.com/for investigating and managing orders.
Audit Metadata